As I remember, we had this problem with password policies and exop - doing password resets via exop would only see a global password policy and nothing more fine-grained. I believe this was logged as a bug in FDS against <= 1.0.4. Since were are using SSL for all connections, we switched to clear passwords and it all worked.