Password Expiration - Change MAX and MIN Password Age

I have used GPO to force users passwords to expire after 90 days.
The GPO also warns users that their password will exipre in N days.
I find that users have to call the help desk if they keep ignoring the warning.
they are never forced to change their password when it expires.
XP Users are forced to change their password when it expires.

Is there a way to force the Windows 7 Users to change thier password once its expired.

Thanks,
Glen

Oi - this post from 2010 worked GREAT! It is still important. The Win7 password reset was bugging me and because I am the only one using this computer - why force a change every 42 days? Thanks for the easy-to-use instructions! I changed mine to unlimited per your excellent post! However, I did not use your link to the command prompt - I found my own way.....via the control panel - just because it was the first time to your site. After joining your forum, now, I feel more secure about clicking the links, the site seems well monitored. Thanks, again!

I have to ask. You state that 42 days is the default setting for maximum password age. Yet I have never had a non domain joined Windows 7 machine ever ask me to change my password.

The weird thing is I was helping a remote user today complaining of an inability to log in. Claimed he had been asked to reset his password and a couple of days later(today) he could not login at all. This was a machine we gave him from the corporate office. Usually when we supply a machine that is not going to be in the office with any kind of frequency we disjoin it from the domain(or build it never having joined), to avoid any sort of policy issue like this. I assumed we just forgot to remove this one from the domain. To my surprise, when i got logged in this was not a domain joined Windows 7 box. Just in a standard Workgroup.

So I looked at the local policy and found it was set to 42 days(our domain policy is 90 days). I had no idea how this got on there. Nor why the time was set to a very short 42 days.

Then I found this thread and few others that reference this default 42 days. However I don't ever recall a windows 7(or other) box that was not domain joined that ever asked me for a password change. I don't have a box at the moment that isn't domain joined to check.

Can you explain when you say default, are you referring to a vanilla Windows 7 build? If this is true any thoughts on why I have never seen a request for a password change before? Not trying to be rude, just very curious and wish I had a new Win7 build to check this out for myself.

Thanks,
Mike