If you want that HC should not set “Password never expires” option on AD accounts while creating new mailboxes and that they should expire with group policy, follow the below steps:
UPDATE [dbo].[tblServerRoles]
SET [ConfigurationXML] = '<ExchangeServerRole>
<SelectedExchangeServerType>exchange2016</SelectedExchangeServerType>
<ActAsBackupServerOnly>false</ActAsBackupServerOnly>
<SrvRecordEnabled>false</SrvRecordEnabled>
<ClientAccessServer>192.168.1.12</ClientAccessServer>
<OwaAccessUrl>https://192.168.1.12/OWA</OwaAccessUrl>
<DomainController>labad16.ad16.com</DomainController>
<RootOu>OU=Hosting,DC=ad16,DC=com</RootOu>
<HostName>192.168.1.12</HostName>
<AdministratorLogin>ad16\exg13</AdministratorLogin>
<AdministratorPassword>EwRJFUdBtY8RE9NvlRd9og==</AdministratorPassword>
<DatabaseSelectionMode>Manual</DatabaseSelectionMode>
<DomainAdministrator>ad16\exg13</DomainAdministrator>
<DomainPassword>EwRJFUdBtY8RE9NvlRd9og==</DomainPassword>
<IsSharedNetworkEnabled>false</IsSharedNetworkEnabled>
<SharedNetworkPathPassword>ok</SharedNetworkPathPassword>
<DontSetPasswordToNeverExpire>true</DontSetPasswordToNeverExpire>
</ExchangeServerRole>'
Where ServerRoleID = 1 --(Use your ServerRoleID.)Note: Specify your ConfigurationXML text in single quotes.