MICROSOFT RECOMMENDED PASSWORD POLICY
In Windows 2000 and Windows Server 2003 Active Directory domains only one password policy and account lockout policy could be applied to all users in the domain. Microsoft has an entire section in their blog post that answers this question but the crux of their argument is that password expiration is a low-value security measure. Turn On Or Off Security Questions Windows 10 Registry Or Group Policy Group Policy How To Find Out Turn Ons For example if the Maximum Password Age value is set to 60 then the user must change hisher password after every 60 days. . Computer configuration - Policies -. My tenant is currently set to an expiry period of 90 days whereas a newer tenant I was doing some testing with last month has defaulted to 730 days. If passwords must be written down on a piece of paper store the paper in a secure place and destroy it when it is no longer needed. Always use strong passwords. I am not sure whether a t...