Local user password policy must be activated after upgrade
In FortiOS 7.4.1, after upgrading, users must activate the user password policy using the CLI. The previous password policy settings will remain valid, but they will not be effective unless the password policy is enabled. If the password policy is not enabled, the expire-days <integer>
option will not force users to change their password after number of specified days.
To activate the user password policy:
config user password-policy edit <name> set expire-status enable next end
See Enhance complexity options for local user password policy for more information.