A handy command if you need to check which user accounts are set with the “Password Never Expires” property: dsquery user | dsget user -samid -pwdneverexpires