HI Robert !
Did you guys have a chance to discuss this ?
Our standard policy on the server is to expire all passwords every 90 days. But like Benjamin, we have several email accounts that i do not want to ever expire. Mainly these are for system alerts from various servers, clients servers, internet connection monitoring, Antivirus Alerts at our internet cafes, etc. Its a significant pain in the (fingertips) and time to run around to and remote into dozens of systems and changes these when they expire.
Considering Security, maybe for the "will never expire" accounts, the password strength should be mandated to be like 15 characters minumum length or something.
www.HawaiianHope.org - Providing technology services to non profit organizations, low income families, homeless shelters, clean and sober houses and prisoner reentry programs. Since 2015, We have refurbished over 11,000 Computers !