Password never expires on sensitive accounts

Hi,

I know there are million and one ways to do this via powershell and 3rd party tools but would it be possible to have ATA alert when a sensitive account has the "password never expires" flag set.  We have a tight password polices on admin accounts we assume that this flag on our admin account is a IoC.  Would be nice to have a single tool to do this.