Actually, I'm just trying it on my XP and 2K workstations in the LAN first to see if the change password works before I try it with a laptop over VPN. I can pretty much duplicate the behavior also by changing the password and then pulling the NIC cable and then logging off. If I can't log back on with the new password, I know the cache wasn't updated. This is essentially what is happenening in our scenario when you break it down anyway.

I'm not sure why this API tool wouldn't work. Are their any dependencies or some other preparation I should know about or do?

G