You connect to a remote network using VPN to access email using Outlook. Your domain account only provides access to email and nothing else. If your password expires, Outlook 2003/Outlook 2007 will alert you and ask you to change your password.
When you type in your new password you will see a message that reads:
Your Windows password could not be changed. To change your password, you must log on to your organization's network or contact your system administrator.
The issue is that Outlook's change password mechanism seems to require your computer to be on the domain. You could ask the system admin to change it for you, but that will get tiresome if your password changes every 30 or 90 days.
I have come up with a nifty little alternative. Based on the assumption that Outlook wants the computer requesting the password change to be a domain computer, I figured the solution would be to make a computer on the domain ask for my password to be changed on my behalf. Simple enough, eh?
So how do you make another computer request a password change on your behalf? It is easier than I thought it would be. Open up Remote Desktop and attempt to connect to any domain computer. You will get a password expired alert, then you can change your password (and it works), then the computer you are attempting to connect to tells you to go pound sand because your account does not have rights to logon interactively.
Changing your own password instead of bugging the admin once a month will keep you out of the doghouse too. Angry admins are no fun at all.