You can create a login with both CHECK_POLICY off and CHECK_EXPIRATION off.

My impression is that if you then (ALTER LOGIN) set CHECK_POLICY ON, that will not automatically set CHECK_EXPIRATION on.

):-D