Let’s get out of the 1980’s of manually doing things and get into the modern age!
This is an issue related to the parent/child feature combined with the new 30 day device expiration security enhancement. When there exists a parent child system relationship (not to be confused with Enterprise Admin), if a user doesn't log into the parent system for 30 days, their devices should not expire as long has they have logged into at least one child account in the last 30 days. Child/parent accounts should all be connected, so if the user is logging into the parent system, their child logins should be extended and vice versa.
Remember - votes count to get this passed! Remember - it may not affect your company now - but if you GROW - IT WILL!