I have following questions regarding password change in credential provider: 1. When we receive ERROR_PASSWORD_MUST_CHANGE in ReportResult method, what steps we should take to change the password? 2. I am changing the password using NetUserChangePassword and passing this new password in GetSerialization (KERB_INTERACTIVE_UNLOCK_LOGON) structure which gives me bad password error. But it works after reenumeration. 3. Do we need to use KERB_CHANGEPASSWORD_REQUEST structure in this case? If yes, what should be the MessageType parameter of this structure? (MessageType parameter is NOT documented in msdn but it is there in the structure). Thanks, /ashwin