Forcing users for a new password so often is a clear NOGO and only happens here. It makes people forget the passwords and write them down on a piece of paper next to the computer which is catastrophic. Forcing users to change the password before they are able to access the account is even worse. My verdict -10* ... at least. Too bad I can't reflect that here.