I was wondering if it would be possible for us to have our enrolled users be required to reset/redo their security questions, say, once a year? We are finding that a lot of time people simply forget what the answers are to the questions and then end up calling our IT department anyways for a reset/unlock.
If we could force them to update their security questions on an annual or semi-annual basis it would reduce the number of times people forget their answers.