In every Active Directory Domain I’ve seen so far, I’ve found a lot of User Accounts flagged as password never expires.
The following command gets you a list of all the user accounts whom’s password is set to never expire.
1 | Get-ADUser -Filter {PasswordNeverExpires -eq $true} |