Old password still works after change in Outlook Web Access (owa)

If you have enabled the ‘Change Password’ feature for Outlook Web Access, and users complaining that their old password still works. This is because with IIS, it is by design. You can change the TTL key in the registry, but this isn’t recommended.

• In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\InetInfo\Parameters
• Look for UserTokenTTL (REG_DWORD)
  
• Add the value: 0 – 0x7FFFFFFF (This is in seconds)