I used tom have it working, but now I get way too many of these errors to
treat it as a working solution:

How to tackle it?

Message 39:
Mon Apr 08 08:19:16 BST 2013
Error
<status event-id="pwd-subscribe" level="error" type="driver-general">Could
not set password via platform call. Err=5 (access denied)<operation-data>
<password-subscribe-status>
<association>a1533d87d424524296ec5cff5fe36233</association>
</password-subscribe-status>
</operation-data>
<application>DirXML</application>
<module>AD-driver</module>
<object-dn>\TREE\UK\*****\*************\***********</object-dn>
<component>Subscriber</component>
</status>
\TREE\UK\*****\*************\***********