Is the time period enforced from the date the user is created, or from the date of the users last login?