Password policies for user accounts in Active Directory environment are controlled by group policy settings located at
Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy
There are six policies there. They affect all the domain users and normally there are no means to exempt an account from the policies.
The only exception: if you check 'Password never expires' setting on the user's properties in Active Directory Users and Computers, domain setting for maximum password age can be overridden for that user.
However, this can lead to certain security breaches, so the option should only be used for services accounts only; for even more security, event logs should be monitored for any authentication attempts for such 'never-expiring' accounts.
Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy
There are six policies there. They affect all the domain users and normally there are no means to exempt an account from the policies.
The only exception: if you check 'Password never expires' setting on the user's properties in Active Directory Users and Computers, domain setting for maximum password age can be overridden for that user.
However, this can lead to certain security breaches, so the option should only be used for services accounts only; for even more security, event logs should be monitored for any authentication attempts for such 'never-expiring' accounts.
