This figure shows the Forced Enrollment setting on the Settings tab of the Settings node. It shows:
The number of Deferrals allowed before a user is must enroll in Password Reset