I should also mention that the TimeSpan values that you get as part of domain policy are all negative.  You must account for that if you use them later in calculations.