Description

All users should have a password change date in the past.

Rationale

If a user recorded password change date is in the future then they could bypass any set password expiration.

Warning

Automatic remediation is not available, in order to avoid any system disruption.