The password of every local created User-account expires in 3 months.
You need to change the password within these 3 months.
Without changing the password in time, the account is disabled and cannot be used anymore.
There need to be options to disable or change the password-expiry, and to re-enable disabled User-accounts.
Especially in an air-gapped environment without a mailserver, password expiration without any warning is not feasible.