I’m quite happy about this.  expiring passwords is quite frankly stupid.  All this promotes is simple, easy to crack or hard to remember passwords.

In Windows 10 1903, Microsoft got it right.  They said: look if you think this is improving security your mistaken.

Here’s the really well written article that they published about the change.

Now, it will take the industry, in particular auditors in the industry to catch onto this.  Nothing against auditors but I wouldn’t be at all surprised if this continues coming up in audits for years to come.