Symptoms:
Some of my users are unable to change their passwords via OWA on Exchange 2007 on Server 2008. My DCs are running Server 2003.
Argh.