thanks for the posts

we have enabled the majority of these already.

all good stuff to know.

made it into work despite the snow and double checked this.

the password is indeed complex however not complex enough.... it seems like the service account that altiris uses is deemed...

thanks for getting back.

it is indeed installed on a 2003 server and complex passwords are enabled at domain level / in AD. therefore editing local policy won't be possible...