A group of users in the Research Department has access to sensitive company information, so you want to be sure the group members’ passwords are strong, with a minimum length of 12 characters and a requirement to change their passwords every 30 days. The current password policy requires passwords with a minimum length of 7 characters that users must change every 120 days. You don’t want to inconvenience other users in the domain by making their password policies more stringent. What can you do?