Nice script. Do you know how to turn the "password never expires" off? That is, so the option is deselected in user manager? Any help would really be appreciated. Thanks. My company wants us to turn it off. Here's their reasoning: Password Expiration. Severity: Important (Cat II) Status : Open PDI ID : 1745 Finding Details HelpAssistant password does not expire. SUPPORT_388945a0 password does not expire. xadministrator password does not expire. xguest password does not expire. Vulnerability Discussion Category II - Allowing individual users to have passwords that never expire, gives the ability of unauthorized system users to crack passwords and gain access to a system. Scheduled changing of passwords will hinder this ability. Manual Fix Procedures Ensure that individual users are not setup with the option password never expires. References and Additional Resources FSO Checklist: 5.07.1.2 NSA NT Guide: Chap. 5, p. 30; NSA WIN2K Guide, Group Policy: Security Configuration Toolset: Chap. 3, p. 22; DODD 8500.1 Para 4.18; DODI 8500.2 DCCS-2, DCSC-1; CJCSM 6510.01 App. A, Enclosure A, Para. 5.b (8)