You can also run at a command prompt "net accounts" and see what the
effective account policies are. The domain password policies are only read
from the Default Domain Policy so you need to ensure that that is also
getting applied to the domain controllers.
269236 Changes Are Not Applied When You Change the Password Policy http://support.microsoft.com/?id=269236