If Novell AD user account doesn't enable 'Password never expires' option, when the user login DSfW domain in Windows XP, it will prompt for change their password, after changing their password will get the error 'Unable to log you on because of an account restriction', if click the option 'Password never expires', then the user able to login Windows XP.

Enable 'Password never expires' cause I can't enable 'User must change password at next logon', so that user can't force user change thier password.

Any idea?