Error: "You must change your password before logging on the first time. Please update your password or contact your system administrator or technical support". (4376413)

Error: "You must change your password before logging on the first time. Please update your password or contact your system administrator or technical support".

During a forest restore using AD from clean OS method you are prompted to reset password for Domain Admins. After the restore completes you try to login to a domain controller, but the following error occurs:



As per page # 256 from the user guide new passwords meets the domain password policies and the restore to Azure was completed with Bastion turned on. When prompted, the "Reset Password for privileged users feature" was selected.

This is RDP client behavior and the whole point of that feature is to require user to change password.

You may login with an account specified for each DC in "Domain user name" field. Its password is set to value provided into next field (Domain user password) and not to value in ResetPassword dialog using a new password there. This password should not be the same password of the user from the backup. 

For this user (specified in Domain user name) there is no need to change password on first logon. But other users in groups must do that, otherwise obviously they will have the same password. 

To allow to change password via RDP they can try to use workaround described:
https://learn.microsoft.com/en-us/troubleshoot/windows-server/remote/remote-desktop-connection-6-prompts-credentials ​​​​​​​

Detailed steps in article with pictures:
https://docs.hetzner.com/robot/dedicated-server/windows-server/changing-windows-password/ ​​​​​​​