A policy parameter called “maximum Windows password age” establishes how long (in days) a password can be used before the system asks the user to reset it. Windows’ maximum password age is set by default to 42 days. Passwords may be made to expire after a specific number of days, ranging from 1 to 999, or they may be configured to never expire by setting the number of days to 0. Using the Local Security Policy or the Command Prompt, the maximum password age policy setting can be modified.