Scenario: A Citrix Administrator discovers that there has been a security breach that requires all users to change their password. However, users are NOT able to change their password through StoreFro

StoreFront's password management feature includes an 'Allow users to change passwords at any time' setting that, when enabled, presents a password change option to all users regardless of whether their current password has expired. This is the correct setting for a security breach scenario requiring all users to proactively change their passwords immediately.

Allowing expired password changes only permits users to update passwords after they have already expired, which does not address a security breach requiring immediate voluntary password changes for non-expired accounts.

Enabling the password expired warning notification period only alerts users that their password will expire soon and does not grant the ability to change passwords on demand.

Enabling password change on NetScaler Gateway applies to gateway-authenticated sessions, but the scenario specifies the issue is with StoreFront, making this an incomplete or misdirected fix.