Updating Password Controls - does it force accounts that do not meet new requirements?
We are looking at updating our password controls but we need to know what occurs with the users whose current password does not meet the new requirements in the controls. If we do not force the users to update their passwords does it only look at the new requirements in the password controls when the user chooses to update their password or will it fail when users try to login and their password does not meet the new requirements?