We recently invoked a new password policy for our 2003 active directory domain. One of the users keeps getting locked out since the password policy was put in place. I checked to make sure there were no services using this account to start up and there are none. I have since deactivated the password policy. When I go to change the users password back to the old one I'm still getting a message saying that the password doesn't meet the complexity set in the policy. I've double checked the GPM and everything for the policy is turned off. Any ideas?