Dropping the password-expiration policies that require periodic password changes.
I'm told you, a lie.
ps: The work of any Windows Server Administrator is 99% to change the password of the users and 1% everything else.
I do onsite course of Windows Server (in Spanish) and one part important is the security. It's time to update the program.