Password Expiration...

Archived from groups: microsoft.public.win2000.security (More info?)

Good afternoon,
Would someone explain to me what I am doing wrong with setting password
expiration on my Windows 2000 server?

For this scenario lets assume I installed active directory and created
50 user accounts 120 days ago. It has been 150 days now, nobody has changed
their password and I want to enforce password expiration of 120 days.

I open Domain Controller Security Policy and set the value to 120. No
passwords have expired. I look at the user information using 'net user
%username% /domain', expiration field states "Never".

I open Domain Security Policy and set the value to 120, just because it
did not work above. No passwords have expired. I look at the user
information using 'net user %username% /domain', expiration field states
"Never".

What am I doing wrong? I have not configured any group policies, I have
not touched any user accounts. Everything just exists as plain as plain can
be from install. Please help.

Thanks in advance
mene mene