I have a mandated scenario where there is one master login to the RDP server. The VFP app requests the user's windows/AD login name and password and validates that the two are correct.

I have a problem with the way I usually would do this, and I do not know another way.

(I can get other info from LDAP object as needed.) For login verification I input the user domain name and password, then use

	loUser = GETOBJECT("WinNT://" + tDomain + "/" + ALLTRIM(tuser) + ",user")
       try
	      loUser.ChangePassword (tpassword,tpassword)   
     catch
           llPasswordVerified = .F.
     endtry

	RetURN llPasswordVerified

Trying to change the password lets me know if I have the correct password, and since I am changing it to what it is now, I am doing no harm.

BUT - this network enforces not using passwords used in the past, so the ChangePassword function as I am using it always fails.

Any suggestions?