Network Passwords

Recently on our NT Server, during an audit it was requested that we now expire passwords every 30 days, force new rotation every 3rd time, 3 incorrect attempts forces lockout. Settings have been changed and users were primily locked out – nightmare. Upon resetting the passwords, the became “locked out”. Toggling to not locked out, user would wait, reboot, log back in – unable to because LOCKED OUT was re-enabled. Anyone know why this is happening? It has been a nightmare. Even if I change their password for them, lockout is greyed out – when they log back in, they are back in lock out. I have to disable lockout twice before they can actually log back in. With 800 users every 30 days – I need a resolution quickly. Thank you for your help.