Password Complexity w/ Minimum password length

[GANGSTA]

we want to change the password policy with the length and the complexity changing, and when it does change, then are the users going to require to change immediately or when the 90 days period is over? Lets says, if the user is at 80 days, and I change the password tomorrow then then in 9 days they will be prompted to change their passwords? Thanks for any information.

[MattyBoy]

I dont think that will be prompted immediately but after the 90 days.

[Janos™]

That is right, the new requirements will be enforced if a new password is assigned, either due to expiration of an existing one or earlier, if a user decides to initiate the change.

[PeterAGASSI]

You need to also note that with a minimum password age of 0, the user has to make 5 rapid changes to get back to the beginning. With a password age of 1 the user cannot do that. You can try to debate whether it is necessary to force a password change, but if you do then you will probably want to set the minimum age.