Whats is your solution for users that are not windows based but they are using users in Active Directory? I am talking about a medium size company with industial users working with IPAD and their users in Active Direoctory. The issue is they have 'Password Never Expire' and we can simply remove the flag due to the fact that they working with IPAD and they do not own a windows machine.
How do you deal with such scenarios? ADFS portal to change password with notification pushed to the user? Setting deny logonlocally?