I didn't say earlier, the school are using Win 2008 R2 with XP clients and kids log on with no passwords.
Pretty sure I've set all the password policies to disabled or zero as required, however I'll have a closer look at the Default Domain Policy and double check the security settings in case I've missed something.
I'm due on site on Thursday and I'll report back.
Thanks so far.