prompt user to change password before expiration

[Moe]

Please help. our network consist of about 60 workstations.
We have Win2K DC/Active Directory. Our DHCP and DNS
servers are in diffrent location. Users are no longer
prompted to change their password 14 days before
expiration. I checked the setting (prompt user to change
password before expiration) it is set to 14 days at the
DOMAIN and LOCAL level. The no overide switch in the
policy tab under options is turned ON.

Is there any other setting, I have to set or missing in
order for this option takes effect? Users accounts will
expires in few days. What am I doing wrong. Please help.
Thanks

 

[Ondrej Sevecek]

on the workstation start:

secedit /refreshpolicy machine_policy /enforce

and your policy will be refreshed to current state.
If this doesn't solve the problem (and I suppose it won't), try starting:

gpresult.exe /S

and you will see all the changes made by the policy application.

Nice day Ondra.