No, the business rules in Configuration are not followed when using applications created through VBA/API. This allows custom automated processes to run with minimal user intervention. 
Note: API logins are still affected by the Business Rules. For example, if the API.init is called, and the user's password is expired, then the user will be prompted to change their password.