There isn’t a direct API or workflow action to update AD account attributes like accountExpires in IdentityIQ/ISC. The workaround is using an intermediate delimited file connector: update the file via workflow, then sync changes to AD through attribute synchronization (discussion here). Direct connectors don’t support account updates from workflows, and identity attributes can’t be modified via workflows either.