I have a group policy that asks the user to change their password every 90 days and starts asking them at 10 days. We have a 2008 r2 domain and a citrix 2003 server and exchange 2007 on windows 2003.
The problem is that the user will not get challenged on logon on te winodws 7 machine. But if they log into outlook/exchange or citrix they will then be asked to change their password. This was a windows 2003 domain that i upgraded to 2008 r2. Not sure if this is the issue but it only affects the window s7 machines.
What I did is change prompt user to change password from 14 days to 10 days just to confirm the user is getting the group policy and they are.
Thanks in advance