The 'Maximum password age' setting should be configured correctly.
[number_of_days]
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy\Maximum password age
oval:org.secpod.oval:def:7902
SCAP Repo OVAL Definition
2012-11-10