VPN

We have just implemented a change password policy (NT domain), the issue is with VPN sessions. Our remote users never have a chance to change the passwords because they are never notified by the domain. Of course the users on the LAN will receive the password change notification, but not VPN users(w2k client). Has anyone come across this issue or have any ideas? (NO Active Directory).