Force Password Change

Have setup a Security POlicy forcing users to change their password every “x” number of days. Have also set the password history so they cannot reuse password.

This worked fine, when a user is prompted for their new password they cannot resuse an old one. However when they go into their WebAccess client they can change this to their old one…is this a buf or is there a workaround?

For new users have ticked “Force user to change Internet Password on next login:”. This does not appear to work for the Web Access users…am i missing something?

I thank you…

Subject: Force Password Change

Custom password policies only apply to the password on the Notes ID file, not the Internet password.