We had a password expiration policy recently removed from our AD but some users continued to get the "..your password will expire in x days. would you like to change it now?" message.

So we added a reverse/undo policy to correct the local registry settings

Maximum password age = 0 days
Minimum password age = 0 days

This hasn't worked as new users still seem to encounter the above "change password" message sporadically. We have now removed all custom password policy GPOs and are left with the "Default Domain Policy". Still no good.

Can someone point me in the direction to fix this? And an explanation into what i was doing wrong (/how password expiration policies apply) would be useful too. thanks

Environment is 2k3 server with mostly XPsp2 clients.