Our nurses station has multiple workstations that are accessed with a shared windows AD account. The nurses also have their own AD accounts that are attached to Exchange accounts for email. We are planning on implementing complex password with max age expiration soon, but are unsure how to handle the change for them? I have found that when AD requests a password update, the end user is not notified about the change until they try to logon to the domain from a workstation. This means that when they logon to OWA from the shared account, they will be denied access but never notified that the change is pending. We have 100+ nurses that use these 10 workstations so will we need to sit down with them individually and show them how to logout of the shared account and then login to their own to perform the password change? Even then there will be a period of confusion until they contact the help desk.