It's actually under Messaging>Security Administration. It's
called "Maximum Days Permitted Between Changes" and if you set it zero, you never have to change any mailbox passwords. Or you set the number of days before one must change their password. Bear in mind this is a system wide option, once set...it affects all mailboxes including the administrator mailbox.