Microsoft RDP apparently lets you log in with expired passwords - and it apparently doesn't have plans to fix the issue

https://www.techradar.com/pro/security/microsoft-rdp-apparently-lets-you-log-in-with-expired-passwords-but-it-doesnt-plan-to-fix-this