Someone came across this behaviour:
EEPC 5.2.4.: Windows 7
If a Domain User tries to log-in with a expired Domain Password (SSO through EEPC), Windows notifies about a expired Password but does NOT ask the User to change it. At this point the User is stuck with no chance to log-in.
The Domain Password needs to be changed seperately (Admin etc.) either the same as the expired Password- or a new one -> Synch. SSO Details.
Turning off SSO is a workaround... at this time the only one i know.