Alongside the draft release of the configuration baseline settings for Windows 10 v1903 and Windows Server v1903, Microsoft has revealed its plan to do away with password expiration policies beginning with the Windows 10’s May update.
Once these policies are removed, organizations should replace them with modern and improved password-security practices such as multi-factor authentication, detection of attacks aimed at guessing passwords, detection of anomalous log on attempts and the enforcement of banned password lists.
