On 18/03/16 12:58, Stian Thorgersen wrote:
Seems like a strange requirement. I can see why you would want users
to
update the password frequently, not the other way around. Or is there
something I'm missing?
This makes sense when combined with a password history policy.
To prevent users from reusing old password you also have to prevent them
from changing the passwords immediately after they were just changed.
=Stefan