Hi, I've done some search on the internet but found nothing about this issue. When in Work group manager you set a policy for the users password to be changed at next login it does not change the users keychain password. Therefore they become out of sync and the user is constantly prompted for passwords. Recently I wanted to make everyone change their password but had to get user to do it via System Pref > Account so that the keychain stayed in sync. This is would not be manageable in a larger setting. If there something I'm doing wrong or is this a major omission from Mac OSX?