When enabling the password policy in W2K-AD (for say 90 days), does the user's current password stay in take until the 91st day or does it immediately prompt for a change at the next login? If it does prompt for a change at next login, is there a way around that? I would like to enforce a password change but start at the 91st day not immediate.