I am using IAdsNameTranslate::InitEx by giving in the details of a user who
"must change password at next logon". The error returned by InitEx is
"Access
Denied" instead of "Password must change". This behavior is seen on the
production AD.
But if I try this against my test AD then I get the "Password must change"
error returned as expected.
Could there be some Active Directory Policy here controlling the behavior
of
the production AD?
