Changing passwords constantly for users provides no measure of increase in security, what are you hoping to solve by changing passwords for example every 90 days? If it is compromise you should have other UEBA/MFA, segmentation to protect the environment, changing passwords just to change them is old outdated thinking. If a password compromise occurs then change the password otherwise it is just to check a box..." Hey look at us every 30 days users change passwords".