Users cannot change their AD passwords.

We have around 90 macs bound to our AD, all of which are running 10.4.11 or 10.5.4

Our password policy requires users to change their passwords every 90 days, and they must meet the following requirements

Must contain at least 8 characters,
Must contain a number
Must contain an uppercase letter or symbol
Cannot be similar to your name or previous 4 passwords
etc

Last weekend around half of the users passwords expired. When they attempted to login on Monday morning they were asked to input a new password. Even though they followed the complexity requirements for their new passwords, the login window shakes and doesn’t allow them to login/change the password.

I went through the process step by step with most of our users on 10.5 and 10.4 macs and they all had the same problem apart from a few of the 10.5 macs which do appear to have allowed the password change…. For the majority though I have to manually reset their passwords on the servers.

We also have a few macs with local user accounts. When those users try to connect to the servers they are also prompted to change their passwords. When they try to do this from the connect to server window it allows them to input the new password and then closes the window when you click ok. When you then try to connect to the server again it won’t accept the new password.

Any ideas? I’ve searched Apple discussions, here, mac windows etc but have yet to find a solution to this problem.

Thanks in advance