Using ice I imported my users in to a container with a password. With admin rights I checked
Required a password
Force periodic password changes
Required password changes
Limit grace logins

User logs in all fields return back to unchecked.
I gave NDS rights WRITE & add self to the container with inheritable.

What else do I need to manage users accounts?