Ever since implementing Universal Password and IDM (syncing between eDir
and AD and only one way... from eDir to AD), we have seen random user
password changes. These changes occur sometimes multiple times per day,
sometimes once a week, sometimes once every few weeks. Not all users
are affected.

In addition to the passwords changing, the "force periodic changes" is
also removed from the account and the number of grace logins is changed
to -255.

Has anyone seen this or no of a way to track down the problem?