password

where do you change the effective policy settings on when to warn for password expiration. I am familiar with the local settings location.