MS has their guidance also not recommending password cycling: https://www.microsoft.com/en-us/research/wp-content/uploads/...

But he mentioned servers not users. If those are Windows Servers in AD env, LAPS exists: https://www.microsoft.com/en-us/download/details.aspx?id=468...