Thanks for the input . But ,once the password is expayered the user will be able to change his password during the grace period which will only start after he tryes to login . Please correct me if I am wrong .

My requirment is that a user who has not loged into his account for 2 months will be locked and only the administrator will be able to unlock the account .