ONTAP does not set the PasswordNeverExpires flag on the CIFS server machine account. If this flag is set it was done outside of ONTAP. The userAccountControl attribute will have a value of at least 0x...ONTAP does not set the PasswordNeverExpires flag on the CIFS server machine account. If this flag is set it was done outside of ONTAP. The userAccountControl attribute will have a value of at least 0x10000(Hex) or 65536(Dec) if the PasswordNeverExpires to remove this flag run the following command from an admin powershell prompt: Set-ADComputer -Identity <CIFS Server name> -PasswordNeverExpires:$False ONTAP has its own password change schedule that is disabled by default.