how to force user to change password before expiration
For instance if you force users to change their password every 30 days, the default 14 day value for this policy would result in users being prompted to change their password when the current password has only reached half its lifetime. In such a case you would probably reduce the value to 4 or 5.