It is always recommended that users be forced to change their password to increase security. You can force users to change their password at a specific interval, such as every 30 days. You can configure this behavior by editing the local security policy.

1. Click Start and select Control Panel.

2. Double click Administrative Tools.
3. Double click Local Security Policy.
4. Expand Account Policies and select Password Policy.
5. In the details pane, double click Maximum password age.
6. Use the arrow and set the value to 30 days.
7. Click OK.

You can also ensure that users keep the same password for a minimum number of days by changing the Minimum password age. Complete steps 1 through 4 and double click Minimum password age in the details pane.