As I remember, we had this problem with password policies and exop -
doing password resets via exop would only see a global password policy
and nothing more fine-grained. I believe this was logged as a bug in FDS
against <= 1.0.4. Since were are using SSL for all connections, we
switched to clear passwords and it all worked.