Exchange Change Expired Password

Hi, we have APM to secure the authentication for exchange 2010, the configuration done using the iapp 1.6.0.the setup is stable and working properly now what we are trying to do is that, give the user the ability to change his password if the password is already expired or before week from the expiration. we tried to use AD Query and set "Prompt user to change password before expiration" option to be 1 week but it didnt work with us, we didnt get the "change password page" and it gave us apm log says "change password rejected". we opened "any" between F5 and AD server for testing to exclude the FW access from our troubleshooting and still we didnt get the "change password page". i have two questions: 1- does APM support change AD passwords after it expires? if yes how? 2- is there any further configurations needed than "Prompt user to change password before expiration" option in the AD Query to give the user the ability to change his password before the password Expired?