Domain controller issues - not keeping security objects

[caeserjk]

I have recently noticed our domain controllers doing some weird things. Whenever a user changes a password, it will accept the new password, but when they come in the next morning and log on, it will not accept the new one. It will however accept the old on. Also, when they try to access their user folder on domain controller 1, it will tell them “access restricted” even though they have full rights. They actually have to disconnect the drive and reconnect it before they can access it.

Domain Controller 1 – Windows 2000 Server (Back Office – if it makes a difference)
Domain Controller 2 – Windows 2000 Server

Any thoughts?
caeserjk