It seems that there's a bit of a race condition going on between the service initializing the user accounts and the system getting to the login prompt. (Server 2016, Server 2019)
When the system comes up on the first boot it presents the Administrator account with the request to change the password. Cancelling this or just waiting for the screen to timeout, then going back to it shows the prompt has gone (and other accounts are now available), and checking the account settings shows the password change flag isn't set. On all subsequent restarts the accounts are as expected and no password change prompts appear.
Based on this it looks like the service is slow to configure compared to the OS booting to the login prompt, but given time it all settles down. As such it's more of a cosmetic issue as the underlying settings are obviously being applied properly but it isn't ideal to be presented with an Administrator password change request on the first start even if it's only transient.
Is there a way to hold off the login screen until the initial configuration has progressed further?
It seems that there's a bit of a race condition going on between the service initializing the user accounts and the system getting to the login prompt. (Server 2016, Server 2019)
When the system comes up on the first boot it presents the Administrator account with the request to change the password. Cancelling this or just waiting for the screen to timeout, then going back to it shows the prompt has gone (and other accounts are now available), and checking the account settings shows the password change flag isn't set. On all subsequent restarts the accounts are as expected and no password change prompts appear.
Based on this it looks like the service is slow to configure compared to the OS booting to the login prompt, but given time it all settles down. As such it's more of a cosmetic issue as the underlying settings are obviously being applied properly but it isn't ideal to be presented with an Administrator password change request on the first start even if it's only transient.
Is there a way to hold off the login screen until the initial configuration has progressed further?