That certainly is an interesting article, although I'm not sure where to
look now. Assuming this is it, it sounds as if Winlogon isn't calling this
API during a password change. I'm going to try the reg setting on a single
XP box to retain a copy of the master password and see if that helps.