If you use ldp and bind to a DC in your domain and then open the Domain NC head (Ctrl+T), can you paste the spew that shows up on the right?
Thanks, Brian Desmond br...@briandesmond.com w – 312.625.1438 | c – 312.731.3132 From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Tuesday, April 19, 2011 7:52 AM To: NT System Admin Issues Subject: msDS-MaximumPasswordAge So I have a 2008 granular pw policy set on an OU, it applies to a security group properly and all of the settings in the policy work except the Max Password Age. It is set to (never). Yet in a year like clockwork the password expires and the account is prompted to change the password. There are no other policies in the domain that even come close to saying a password expires in a year. Any ideas? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin