Password policy behavior when policy settings are edited

(I'm not sure if this should be asked here or in the IDM forum; please
tell me if it doesn't belong here)

If you have a global password policy assigned to your eDirectory tree,
and the policy does NOT have a requirement for periodic password
changes, but you later edit the policy to add that requirement, what
happens? My guess is that the policy calculates password expiration for
each user (at login) based on their last password change, but the
results I've obtained by testing this in my lab environment are so
inconsistent as to be meaningless.



Thoughts?


Thanks