Short answer is generally at expiration. Especially complexity which is what you asked about.
I could write out a long explanation but this covers it pretty well I think.... http://blogs.technet.com/b/askpfeplat/archive/2013/10/11/active-directory-password-policies-when-does-a-password-policy-change-affect-a-user.aspx From: [email protected] [mailto:[email protected]] On Behalf Of Kuehn, Shannon Sent: Wednesday, July 16, 2014 1:31 PM To: '[email protected]' Subject: [NTSysADM] Password Complexity Implementation Questions Hi all, Quick questions for the uber skilled (many thanks in advance): - When implementing password complexity via GPO, what happens to my users who are logged in with poor passwords? Do they get prompted to change their password when the GPO refreshes? - What will happen to users traveling? Most of my users have a desktop in the office (authenticated to our AD controllers) and a laptop they travel with (to access our Citrix environment remotely). When the GPO refreshes, are they SOL? - I intend to flesh out as much as possible before inconveniencing my users (I promise). The thing I'm having a tough time figuring out are answers to the above 2 questions. Any help or ideas you can offer, will be awesome and very much appreciated. ________________________________________ E-MAIL CONFIDENTIALITY NOTICE: The contents of this e-mail message and any attachments are intended solely for the addressee(s) and may contain confidential and/or legally privileged information. If you are not the intended recipient of this message or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message and any attachments. If you are not the intended recipient, you are notified that any use, dissemination, distribution, copying, or storage of this message or any attachment is strictly prohibited. GEM Realty Capital, Inc. and its affiliates and subsidiaries are not responsible for any recommendation, solicitation, offer or agreement or any information about any transaction, customer account or account activity contained in this communication. PG&E is committed to protecting our customers' privacy. To learn more, please visit http://www.pge.com/about/company/privacy/customer/
