Re: Default Domain Policy Question

From: Danny Sanders (Danny.Sanders_at_NO-SPAMcpcmed.org)
Date: 01/21/05 

Date: Fri, 21 Jan 2005 11:31:50 -0700

Enable the "password never expires" attribute on each service account.

For security reasons you should manually change their passwords
periodically.

hth
DDS W 2k MVP MCSE

"Nut Cracker" <nutcracker@internationalhacker.org> wrote in message
news:uHFRXW%23$EHA.1084@tk2msftngp13.phx.gbl...
> Hello All,
>
> I have a situation where the Default Domain Policy (DDP) is configured for
> passwords to expire in 90 days. I have an OU full of service accounts that
> I dont want to be subject to that policy.
>
> How do I go about creating an exlusion from the DDP for this OU ? I am
> told that I can oly set the password policy at the DDP level, so Im kinda
> in a lurch here.
>
> Thank you for any light you can shed on this.
>
> - NuTs
>

Relevant Pages

  • Re: Group policy and password changes
    ... characters and complexity should be enabled. ... And after that I make the changes in group policy and apply. ... Suppose if I select Password Never expires and apply the policy what ... could understand for a service account but nor for a user account. ...
    (microsoft.public.windows.server.general)
  • Re: Default Domain Policy Question
    ... You need to access the account properties of the service ... accounts and set the checkbox for Password never expires. ... a policy for this that could be used to set it on all accounts ... > How do I go about creating an exlusion from the DDP for this OU? ...
    (microsoft.public.windows.group_policy)
  • Re: Password Policy
    ... You minimum password age is badly high. ... Steve Riley wrote an excellent article on why password complexity is not so ... allowed to change their password before it expires. ... You can circumvant a bit the password policy by having 'password never ...
    (microsoft.public.windows.group_policy)
  • Re: Password expires for no apparent reason
    ... do not know if the policy was set and then cahnged to 'not defined'. ... the minimum password age is there to prevent users from blowing ... As Harj said Account lockouts could potentially be a problem as perhaps ... Password expires for no apparent reason ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password never expires-cant force user to change password
    ... I'm just not a very good script writer and am not very confident. ... > password policy other than the fact that instead of thinking that UserA has ... > 90 days until their password expires, after you run the script UserA's ... >> expiration dates are staggered by department. ...
    (microsoft.public.windows.server.active_directory)