Allows users assigned to the security policy to change their own password. Your selection enables (Yes) or disables (No) all the options on the Password Policy tab.

Checking this option means the same password cannot be used until the user has changed passwords n times, where n is the number specified by the administrator. If this field was 5, for example, 5 different passwords must be used before the original password can be reused. This field is normally used in conjunction with the Enforce minimum password age field.

Checking this option means that a user cannot change their password until the specified number of days have passed. This field is normally used in conjunction with the # of passwords before a repeat is allowed field. Together these two fields prevent users from repeatedly changing their password in a single session until the repeat parameter is met, thus getting back to their current password.

Checking this option means that a user's password expires n days after the last change, where n is the number of days specified by the administrator. If this field is unchecked, it means that the password never expires and the user would never be prompted to change it. Checking this field also enables the Prompt user for password expiry checkbox.

Checking this option means that the user starts to receive warning messages whenever that their password is about to expire when they log in. It also asks them if they would like to change it, thus resetting the expiry counter. The warning message is shown every time the user logs in from the day the messages starts until they either change their password or it expires. This field is only available if the Enforce maximum password age is checked.