Thanks for the link. That method is what I am using to apply the new policy, which greatly increases the number of attempts for 2003 users. Problem is, once I set it, they are still unable to connect.

I'm guessing the easy thing to do is to apply this policy before they are locked out, however, the admin and microsoft advised against this, telling us to only apply it to affected users.

So, once set, we still have to wait for some timeout period.

If I can't figure it out, I'm going to insist on another case being opened with microsoft. I'm just trying to avoid this situation by finding the answer myself if possible..

Thanks again for looking!