No time limit involved, and that will work fine for users that you haven't been approved yet. From my understanding he's looking for users already in the database and active, but have either never logged on, or were in the database already prior to when email validation was turned on.