The change password at next logon attribute is a setting that forces a user to change their password when they log on to a domain for the first time or after their password has expired. This attribute is enabled by default for new Active Directory user accounts or when an administrator resets a user's password4.
However, Prism Central does not support this attribute for Active Directory authentication. Users with this attribute enabled will not be able to log on to Prism Central using their Active Directory credentials. They will receive an error message saying "Invalid credentials" or "Authentication failed" when they try to log on5.
Therefore, if an administrator is not able to log on to Prism Central using a new Active Directory user account, the most likely cause of this issue is that the change password at next logon attribute is set for that user account. To resolve this issue, the administrator should disable this attribute for the user account or log on to a domain workstation first and change their password before accessing Prism Central6.