Don't need password expiration date. We are using the Account Expiration date, which seems to the big problem. Normal users can't run the NET USER command (due to our security policies).