Password set to never expire
Identifies users with DisablePasswordExpiration policy
How to fix it
Enforce password rotation or move to passwordless authentication.
Required Microsoft Graph permissions
EntraAnalyzer needs the following read-only Graph permissions to evaluate this rule:
Directory.Read.All
Further reading
Run this check on your tenant
EntraAnalyzer evaluates this rule automatically on every scan and emails you the results.
Get started — free first scan →