Increase Azure AD password policy and On-premises AD password expiry policy of 90 days to 365 days

Question

We have enabled EnforceCloudPasswordPolicyForPasswordSyncedUsers feature and set almost all users azure policy to 'none' with the exception of a few accounts that are set to DisablePasswordExpiration. The default Azure AD password policy does match our On-premises AD password expiry policy of 90 days.

We would like to increase the policy for users to 1 year and do we simple update the two policies to match.
We have 5 domains do we update the Azure AD password policy to match by using the Set-MsolPasswordPolicy PowerShell command or will the GUI admin center be sufficient?
More importantly, will this have any impact on users such as requiring an immediate password change?
Thank you for taking the time to review.

Answer 1

You can update each domain using:

https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-password-hash-synchronization#cloudpasswordpolicyforpasswordsyncedusersenabled

It wont require an immediate password change, only when its set to expire.

P.S. I dont see the value in requiring a password expiration - esp one that is 365 days. but I understand the business may require that for some reason :)