So I have a password policy in place that expires the password every 90 days. The question is when does this policy take effect?
For example I have bob in my Domain, I set my FGPP on a group to expire 90 days from today. Now i move bob into that group, what happens?
Does the policy take effect the moment Bob is added and he has to change his password 90 days from today (meaning June 21)?
15 days later I add Jane to this group. Does this mean that she has a full 90 days before her password expires or does it mean she only has 75 days left?
Or does the password policy take effect only after their next password change while they are part of the group that has the FGPP applied?