Can't you just set the date farther in the future, so that you don't have to extend it all the time? We were SOX compliant at one poin,t but even then we didn't extend validity dates. We simply deleted/locked the accounts when people left company or accounts were not used. Also not using CUA is a big mistake here IMHO.
How many user IDs will this program process and how frequently?