I researched the resolutions in the related topics. What I found and confirmed. I ran gpedit at the desktop : Computer Configuration - Windows Settings - Security Settings - Local Policies - Security Options - "Interactive Logon: Prompt User I saw the default for Win7 Pro is 5 days. All other XP Pro domain desktops show 14 days. Do I change the the setting on the desktops to 14 days? or do I do it on the Win 2003 R2 domain controller? On a domain controller I see Default Domain Security Settings - Local Policies - Security Options - Interactive Logon: Prompt user to change Password before expiration. Not defined. Default setting is 14 days. I suppose the desktops local settings are used rather than the Domain controller setting? If I changed the Domain controller setting to any other number, would that change the desktop setting? If I need to change the setting on the desktop, I will have to do this on all Win 7 desktops that I deploy? I'm not sure if your reply will go to my Live ID email address of brandall9897@att.net or my work email address bobr@drycreekrancheria.com. Work email is prefered. thank you