- Run gpedit.msc on the domain controller to open Local Group Policy
- Nagivate to Computer Configuration\Windows Settings\Local Policies\Security Options
- Edit the setting Interactive logon: Prompt user to change password before expiration and specify a reasonable number of days, such as 14.
- Users, including those logged in via Remote Desktop, will receive a notification prior to their password expiring.