An on-demand workflow may be used to accomplish this.
Create an 'On-Demand' workflow with the 'Operation' as 'Create User'. Use the 'If-Else Branch' and only configure one side with 'Update' which defaults to 'Change object properties'.
For the 'If-Else Branch Activity Properties condition, configure 'Password Never Expires of Workflow Target’ equals True’.
For the”Update” Activity, configure 'Activity target' to be 'Workflow Target'.
For the target properties, Configure 'Password Never Expires' as 'Set' for action, and 'False' for Value.
Please see the attachment called 'How to Prevent user accounts being provisioned with Password Never Expires checked.docx' with instructions and screen captures.