We have Active Directory setup to send password changes to eDirectory using
DIRXML. We don't have all of our users with password experation intervals.
Some users passwords are not synced between the two directorys since
DIRXML requires a password change event, and this will not occur.

So the users, not running the Netware client and using XTIER, get a dialog
to sign into edirectory. Which they hit cancel on.

How do I detect this? I'd imagine NAL should be able to report this to me
somehow. If I can figure out WHICH users have out of sync passwords, I
can force their password to change.