In AD if the max age policy is “not defined”, is the password age counter running? So if I change the max age setting to 45 days, will it force passwords older than that to change immediatly or will it take 45 days to take affect?