Below is a simple how-to of sorts to get the default domain password policy.
Then to set PasswordNeverExpires as True Or False for a single user, specific ADGroup, specific OU or users in a CSV file.
Notes:
- Specify
PasswordNeverExpires
as$true
to set expire$false
to not expire. - It is recommended users do have an expiring password as a simple security measure by default.
- The default MaxPasswordAge if not explicitly defined, is set to 42 days (via Default Domain Policy / GPO).