diff --git a/wfvm/win.nix b/wfvm/win.nix
index 7f9376d..9153d39 100644
--- a/wfvm/win.nix
+++ b/wfvm/win.nix
@@ -156,7 +156,17 @@ let
     echo "Done"
 
     mv c.img $out
-  '')) baseImage installCommands;
+  '')) baseImage (
+    [
+      {
+        name = "DisablePasswordExpiry";
+        script = ''
+          win exec 'wmic UserAccount set PasswordExpires=False'
+        '';
+      }
+    ] ++
+    installCommands
+  );
 
 in