Implementing 'User Must Change Password at Next Logon' in Custom Credential Provider V2

Question

I am developing a Custom Credential Provider V2, and already handling the case of CPUS_CHANGE_PASSWORD, CSampleProvider::Filter, displaying "Other user" tile and allowing to enter the system as another domain user. However, my Provider doesn't handle the case when a user is set to "user must change password on the next logon". I already viewed these posts:

How to change the Domain Password for a user in LOCK scenario CPUS_UNLOCK_WORKSTATION condition in Custom Credential Provider in Windows 10

Credential Provider V2 : Handle password expired

Unfortunately, I didn't manage to implement this functionality in my Provider, and even though I could display the necessary fields for changing the password, the password itself is not being changed for a user, and the system crashes. I could provide necessary code snippets if needed and I would be glad if anyone could guide me or provide any information!

Answer 1

It is impossible to handle this case in Credential Provider V2. You should wrap existing built-in provider for this use case, however keep in mind that you cannot exclude this provider in your CSampleProvider::Filter.