In the Computer Management panel under XP (I found it in Start-> Control Panel -> Administrative Tools -> Computer Management) under local users and groups you can select an user, and by its properties you can select if an password can expire. There is also an option , forgive me but I can find it at this moment, where you can set the expiration time, it also has to be there somewhere).