Within our organization we have smart card enabled users and other who use ID/password.  We're unable to segregate those users into separate OUs to control which receive password expiration warnings.  Instead, it would be extremely helpful for us to simply have an option within the Password Expiry Notification feature where notifications are not generated for any account where "Smart card required for interactive login" has been enabled.  The following LDAP query would list any account which has the option enabled. 

(&(objectCategory=person)(objectClass=user)(useraccountcontrol:1.2.840.113556.1.4.803:=262144))

Thank you for considering this request.