I changed our maximum password age from 90 to 60 days from what the old Admin had setup. In the past couple days I've had several people's passwords expire which is not surprising to me but they are saying that they're not getting the option to create a new one and they're also not getting a warning a few days in advance that their old password is about to expire. Where in the domain security settings (Windows Server 2003) can I set that up? Obviously I don't want to have to manually give them a new one. I want them to create a new one on their own and to also be warned about it several days in advance.