Howard:

Yes, I have rebooted the pc and the server. I even created a new user to test it on. I still always get 180. I only have one DC in my AD domain, so I don't think replication is a problem. I did issue the secedit /refreshpolicy machine_policy /enforce command and it returned an event ID 1704 indicating a successful policy propegation.

Jochen:

The built in OS command in Win2k, net accounts, returns that the max password age is 173, which is what it is set to in the group policy in AD. However kixtart still thinks it is 180 using @maxpwage.

[Confused] Where does kixtart pull this info from? [Confused]

-Brian
_________________________
Brian