Currently, the administrator of the highest level is able to set the policy for the entire servers hosting all the domains. However, is there anyway, the domain administrator can set their own password policy that the user needs to change their password after certain number of days?

Also is it possible the domain administrator is able to monitor who has made the necessary password change?

Thanks