What we found out was the MMC Account Tab raises an error if it attempts to read the large value. 0x7FFFFFFFFFFFFFFF ( 9,223,372,036,854,775,807) indicates that the account never expires.Īfter creation you could set the value to any desired value.We recommend when an account is created and the account never expires, then set this value to '0'. AccountExpires is a Microsoft Active Directory AttributeType and represents the date when a Microsoft Active Directory account expires.ĪccountExpires is similar functionality to PwdEndTime form Draft-behera-ldap-password-policy