Default Domain Policy - Password Policies Not Applying Cor..

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi all

I have a Windows 2000 domain which has had a default password policy of the
following set in the past :-

Password must be 5 chars long
Change every 42 days
lockout after 6 invalid attempts

Whenever I try to change these settings in the Default Domain Policy, they
initially take, but the password length re-sets itself to 0 chars, lockout
re-sets to 6, and when I enable password complexity, it disables itself!

I have an ASP script that reads these settings, and I've seen the lockout
threshold change from 5 to 6 and back to 5 many times over a few hours (5 is
what I was trying to set it to) after I've made the changes (ie I've done the
changes once and not done anything since).

Anyone got any ideas?

Thanks in advance.

Andy