I have configured an OES2 server to operate as a Domain Controller as per the Cool Solutions article.

When I login on a Windows workstation as the account used by Samba, it prompts me to change the "windows" password.

This would seem to be the equivalent of "force user to change password on first login" policy from Windows-land.

My test setup *didn't* do this, but it was a fresh build to prove the concept.

The production system already had a default samba policy which I assigned to the container holding the samba account.

Does anyone know where/how to set this policy in novell-samba ?