I found a brand new reason to hate Microsoft Windows (I have plenty already).
My boss logged into his computer (windows 7 pro) this morning, becuase it rebooted overnight due to some windows updates. the login was completely routine and without incident. He then tried to run a program that accesses network resources. The program threw an error message complaining of not being able to access the resource, and asked for his username and password. keep in mind he's already logged into his computer at this point, using the very username and password for which it's asking him. it's at this point that he called me, and I immediately suspected that his password had expired. I checked to see if there are any notifications to that effect, but there were none. Finally, I decided to log out and log back in, and only then did windows finally complain that his password had expired, and needed to be changed. so the long and the short of it is this: windows will happily let you log in after a reboot, with cached credentials, even if your active directory password has expired, but you must then log off and log back on to get the password change notification, and you cannot access network resources that require an AD logon until you do.