Passwords are currently set to 'never expire'; if we change to every 90 days, will it expire existing passwords immediately, in 90 days, or not until the user's password has been reset?
5 Antworten
I just tested the above and it's not correct. New password policy wouldn't be applied to existing passwords and would only apply to new passwords.
Also, the password expiration setting would work based on how long a user has had their password. So, if a user has had their password for more than 90 days, it will immediately expire. If not, it will expire later and then they will obviously be asked to use the new password.
I would recommend expiring all current passwords and forcing the user to use new password policy (sending an email to inform them about this beforehand), at least that's what my personal recommendation is.
Setup -> Security Controls -> Expire All Passwords
