FIX: Forefront Unified Access Gateway 2010 incorrectly notifies users that their password expires 2 days later than the actual expiration date

Consider the following scenario:

• You have a system that is running Microsoft Forefront Unified Access Gateway (UAG) 2010 Service Pack 1.
• In Advanced Trunk Configuration, you enable the following features:
  • Change Password
  • Notify user * days before password expiration (e.g., 7)
• Then, you publish a web application.
• In the domain controller, you set the Password Policy setting Maximum password age to a short time. For example, you set Maximum password age to 3 days.
• Then, you log on to the UAG 2010 portal by using a user account that has the setting Password never expires disabled.

In this scenario, you receive a message that resembles the following: Note The placeholder N+2 represents the expected expiration time, N, plus two additional days.

For example, you set Maximum password age to 3 days. When you log on to the portal, you receive the following message:The message that you expect to receive is as follows:

To resolve this issue, install the rollup package that is described in the following Microsoft Knowledge Base article:

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base: