FIX: Forefront Unified Access Gateway 2010 incorrectly notifies users that their password expires 2 days later than the actual expiration date

Consider the following scenario:

• You have a system that is running Microsoft Forefront Unified Access Gateway (UAG) 2010 Service Pack 1.
• In Advanced Trunk Configuration, you enable the following features:
  • Change Password
  • Notify user * days before password expiration (e.g., 7)
• Then, you publish a web application.
• In the domain controller, you set the Password Policy setting Maximum password age to a short time. For example, you set Maximum password age to 3 days.
• Then, you log on to the UAG 2010 portal by using a user account that has the setting Password never expires disabled.

In this scenario, you receive a message that resembles the following: Note The placeholder N+2 represents the expected expiration time, N, plus two additional days.

For example, you set Maximum password age to 3 days. When you log on to the portal, you receive the following message:The message that you expect to receive is as follows: