The range of allowable values (in days) for ExpirePassword is 0 through 32767.
If you enter a negative value, the system accepts the UPDATE, but the value reverts to the default zero value at the next restart and writes an error message to the event log:
3698: SysSecDefaults table has a negative value in an integer column.