Password Policy pwdHistory not being checked? -- answer found