We discovered that somebody with Admin privs had been happily checking the "Password never expires." box for any user who was calling them complaining about changing their password. (This was against ...
Don't think this is possible, but I thought I'd toss it out there: our company wants to remove the ability for support techs to set the "password never expires" option for a user in AD, while still ...