MS has their guidance also not recommending password cycling: https://www.microsoft.com/en-us/research/wp-content/uploads/2016/06/Microsoft_Password_Guidance-1.

MS has their guidance also not recommending password cycling: https://www.microsoft.com/en-us/research/wp-content/uploads/2016/06/Microsoft_Password_Guidance-1.pdf https://www.microsoft.com/en-us/research/wp-content/uploads/... But he mentioned servers not users. If those are Windows Servers in AD env, LAPS exists: https://www.microsoft.com/en-us/download/details.aspx?id=46899 https://www.microsoft.com/en-us/download/details.aspx?id=468...