Control: tag -1 - moreinfo Removing the 'moreinfo' tag just in case. Sure thing I can revert the change in question (which's been with us for quite a long time), - maybe I can push it through a subsequent security update, since not honoring the "need to change password" condition is a rather serious security issue. This is why I really prefer not to revert it if possible. Thanks, /mjt