How do I resolve errors like these? Virtually all of the users with
these problems are associated with a static password policy, so
they're never prompted to change their password. Most of them are
remote and only connect via LDAP, but there are a few that log in via
that Novell client daily...

Object DN: cn=user,ou=container,o=blah
EMail: Some.User@nationalvision.com
Last Changed Date: 2007-12-21 15:44:30 Z
Password Status: Enabled, Set, UP older than NDS, UP !=
Simple, UP != NDS
Distribution Password Status: Set
Simple Password Status: Not set
Password Policy DN: cn=Static Password Policy,cn=Password
Policies,cn=Security

Object DN: cn=user,ou=container,o=blah
EMail: Some.User@nationalvision.com
Last Changed Date: [UNKNOWN]
Password Status: Enabled, Not set
Distribution Password Status: Not set
Simple Password Status: Not set
Password Policy DN: cn=Static Password Policy,cn=Password
Policies,cn=Security

Object DN: cn=user,ou=container,o=blah
EMail: Some.User@nationalvision.com
Last Changed Date: 2008-02-04 13:41:18 Z
Password Status: Enabled, Set, UP != Simple
Distribution Password Status: Set
Simple Password Status: Not set
Password Policy DN: cn=Static Password Policy,cn=Password
Policies,cn=Security