I don't even try anymore. We have so many stupid policy rules (including the fact that three failed logins requires a
call, no reset timer), that it's faster to just get locked out, and have the IT guy reset everything (including password history) so you can use your password again.