Password Question

From: Nick Patellis (npatellis@thefund.com)
Date: 03/12/02 

Date: 12 Mar 2002 15:08:18 -0000
From: Nick Patellis <npatellis@thefund.com>
To: security-basics@securityfocus.com
('binary' encoding is not supported, stored as-is)

Greetings:

My company is struggling with a problem concerning
passwords which I would like to get some feedback
on. Essentially, for certain users we want to enforce
password changing requirements. This by itself
seems straigtforward, but these are customers who
will access our systems via the Internet.

Several have asked why we are forcing password
changing since other web based systems, Schwab,
banks, etc, do not force password changes.

Any thoughts? Any place where I can get some info
on simliar policies?

Thanks

Nick