We have to change both our normal user pw, and for those of us that have admin privileges, also our admin password(s), once a month.

Afaik we don't have users sticking pws all over the place, or anywhere for that matter, and once a month seems ok.

That's all windows stuff though, the sa passwords, rarely get changed - if ever.