My boss wants me to reset passwords to require a min. length of 6 characters. If I change this in local policy, will it lock out users who are currently using less than 6 characters? Also, is there anyway to exclude particular users?