Maybe it is a good safety measure, but there is nothing more annoying than asking users to renew passwords and blocking access to windows components... I wonder if the benifits justify the drawbacks...