Question about Active Directories

[sandpilot]

Hello all-

I'm getting ready to deploy a bunch of new G5's. All of our PC's use Active Directories for authentication and they want me to set up the Mac's to do the same. After several days of trial and error work, I got the Mac's to log in and mount the Active Directory share.

The PC admin says that all users passwords need to be changed every 30 days. If the account expires, the Mac user is locked out and cannot login. Is this even possible in 10.3, to notify the user that the password is going to expire in 2 days or whatever time frame is set?

Am I missing something here or what? Any feedback would be a big help. Thanks for your help.

Thanks
John

 

[scruffy]

Supposedly it works - the open directory document here http://www.apple.com/server/documentation/ suggests it works fine.

However, this article http://www.macdevcenter.com/pub/a/mac/2003/12/09/active_directory.html at oreilly suggests that it's not perfect - if users enter a password hint when they change an AD password (the field is not disabled, as it perhaps should be), the results can be rather odd...