Tip - How To Check If A PSO Has Been Applied To A User Or Group?
Checking users' password policies in Windows Server 2008 domain.
In Windows Server 2008 you can implement multiple password policies for users or groups. The effective password policies for a user or group are stored in AD Attributes. You need to use Attribute Editor to check the password policy status. There is an attribute that you need to check.
Read more here...