I believe that I have fixed this problem by editing the smbldap_conf.pm file and changing the line:- $_defaultMaxPasswordAge = 99999; When I change a user's password the "Password Must Change Date" is now in the year 2279, which should see me out. Tony