Best password policy I ever lived under was the graduate computer lab at the university. The admins just left a password cracker running continuously, and when it got your password, it was time to change it.