I have an ou that has been assigned a password policy that does *not*
have passwords expire, has no forgotten password challenge response
setup, etc etc. These machines are in our training facility, running
xp pro sp3 w/ client 4.91 sp5.

Booted them up today and when I login as the student userids, the
pretty much all go through the process of setting up a forgotten
password challenge response.

What gives? How do I get this turned back off?