In this post, you will read the method to stop remote password change from breaking the VPN certificate. In some cases, the user face that the remote password change damage the VPN certificate, this is due to remote computer system cannot read the cert store.
office.com/myaccount - We instruct our Remote customers to do a CTL-ALT-DEL / Change Password before their password expires... 99% of my group is on WIN10 and the process works fine minus some hiccups. The same process in WIN11 appears to work however the subsequent day they are attempting to login, VPN fails - can't connect to site. We did lots of troubleshooting but in the end, customers needed to come onsite log into the neighborhood network. I deleted the old VPN cert then upload a new copy from AD using "Manage User Certificates".
