Hello Chris,
When you install GroupID it will set the expiration policy for all groups to "Never Expire" by default. If you would like to eliminate this function from being used,you can easily exclude all organizationalUnits or specific organizationalUnits from being included in the global expiration policy by following the steps below:
1. After installation, open the GroupID console.
2. Click on the "Configuration" module in the GroupID tree.
3. Double-click on "Modify User Options" to display the Options dialog box.
4. Click on the "Licensing" link, then click the "Add" button to paste your license number and key.
5. After adding your evaluation license, click the "OK" button twice to close the options dialog box.
6. Click on the "Modify System Configuration" link to display the configuration dialog box.
7. Select the "Group Lifecycle" tab to display the global settings for Expiration Policy.
8. The radio button for Exclude OUs is displayed by default. Click on the "Modify" button to display the Active Directory tree.
9. Click on the checkbox at the top of the container tree to exclude all of the OUs in the domain from using the Expiration Policy or you can select specific OUs that you would like excluded from the policy.
Please post back with questions you have about the information provided above. Looking forward to hearing from you soon.