Get-ADUser -Filter {PasswordNotRequired -eq $true} -Properties PasswordNotRequired
Get-ADUser -LDAPFilter "(&(userAccountControl:1.2.840.113556.1.4.803:=32)(!(IsCriticalSystemObject=TRUE)))"
Get-ADUser -Filter {PasswordNotRequired -eq $true} -Properties PasswordNotRequired | Set-ADUser -PasswordNotRequired $false