AD password changes and Keychain problems – SSO issues

they have finally instituted forced password expirations and rollovers in AD - in so doing my Mac users are getting screwed - once the webform is used to update the password - AD happily takes the change and passes to the macs but it doesn't update the login keychain - so when users log in - they get harangued over passwords in keychains... I see that there is a utility here called Keychain Minder - but it is over 2 years old... it still seems to work - but is there a way to automate the process or getting an update to Keychain Minder (is one really needed?) - what with intel processors and 10.5 (either/both of which were in short supply when Keychain Minder hit version 1.3) Thoughts?