Extended response from Active Directory?

Our user password reset program has been running for months but has started giving an error 53 as each domain controller was rebooted.
I've run out of ideas as to why this is happening.  This is with Net::LDAP 0.39 on Windows 2003/XP and Windows 2008 domain controllers. 


$modify_result = $ldap->modify( $dn, replace => { 'unicodePwd' => $utf_password } ); # change password

if ($modify_result->is_error) {
    print 'Modify: ', $modify_result->code, ': ', $modify_result->error_text, "\n";
    print 'Modify: ', $modify_result->error, "\n";
}

Modify: 53: The server is unwilling to perform the requested operation
Modify: 0000001F: SvcErr: DSID-031A11E5, problem 5003 (WILL_NOT_PERFORM), data 0

Is there a way to get an extended response from Windows AD to show the Windows error code?

Thanks,

-Bruce