I received a notification about from my SIEM that the account ASPNET had its password set to never expire. I have seen this happen before with certain software installations and this alert did coincide with a software installation. What I was curious about is if anyone can tell me if there are typically conditions in a software install that would do this and if so, what some of them may be and possibly the best way to assure that it was done by the installation. Coding and programming is certainly not my forte and I am a novice to some advanced security matters so please overlook any ignorance.
