We discovered that somebody with Admin privs had been happily checking the "Password never expires." box for any user who was calling them complaining about changing their password. (This was against ...