Create a new user rule using the CMS cli and set the "password_age" to 999999You may have to create a new account for that rule to take affect or at least expire out the existing so that it requests a password change.  

Yes, that is correct.  The webbridge service needs to run on the CallBridge server(s).  TURN and the CMS Webproxy needs to be configured on the Expressways.  DNS would also have to be updated (external DNS for CMS join web portal points to Expressway...