This setting specifies the period of time (in days) that a PIN can be used before the system requires the user to change it. The PIN can be set to expire after any number of days between 1 and 730, or PINs can be set to never expire if the policy is set to 0. Default: 0. Counter Measure: Configure this setting depending on your organizations requirements. Potential Impact: PINs will need to be changed within the specified frequency. Fix: (1) GPO: Computer Configuration\Administrative Templates\Windows Components\Microsoft Passport for Work\PIN Complexity\Expiration (2) REG: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\PINComplexity!Expiration