Re: Password Policy Question

From: Darren Mar-Elia (dmanonymous_at_discussions.microsoft.com)
Date: 07/08/04 

Date: Thu, 8 Jul 2004 11:09:27 -0700

Jenna-
Yes, you can set password never expires on a per-user basis and that will
essentially override the password lifetime that you set in account policy,
but you can't override password complexity per user, unfortunately. There
may be third party password filters that can do this, however. 

-- 
Darren Mar-Elia
MS-MVP-Windows Management
http://www.gpoguy.com
"Jenna" <stilesj AT nospam DOT com> wrote in message
news:OntSFEOZEHA.2544@TK2MSFTNGP10.phx.gbl...
> Okay, searching around a little more on google I seem to have found that
you
> can set a password policy for a domain, but override it for select users
by
> selecting Password Never Expires on those specific accounts.  Can anyone
> verify that?  Does that apply for complexity of passwords, too, or just
for
> changing them regularly, etc.?
>
> "Jenna" <stilesj AT nospam DOT com> wrote in message
> news:%23tLs4E3YEHA.2500@TK2MSFTNGP09.phx.gbl...
> > I would like to apply a password policy to my domain.  This would apply
to
> > all computers/users in the domain.  However, there are a couple of user
> > accounts for which I would like to keep a single constant password.  If
I
> > change the computer configuration in the default domain policy to
include
> a
> > more stringent password policy, can I still individually set a couple of
> > accounts to ignore that policy?
> > Thanks!
> >
> >
>
>

Relevant Pages

  • Re: AD 2000, Blank passwords, and Group Policy
    ... the original creator of these accounts set them to 'Password ... never expires' so that won't work for me. ... I'm going to have to use your suggestion of disabling the policy ... > file though you may want to post in a Windows scripting newsgroup for that You might ...
    (microsoft.public.win2000.security)
  • Re: Password Change Policy
    ... > You can set the password never expires attribute on the accounts services ... >> next logon" setting for multiple users at a single time? ... It will affect all accounts except ... >> setting up a password change policy. ...
    (microsoft.public.win2000.active_directory)
  • Re: Local setting vs. Effective setting w/ GP??
    ... Password policies do not override local policies. ... >>> local policy affects local account meanwhile domain policy affects domain>> accounts. ...
    (microsoft.public.win2000.active_directory)
  • RE: Group Policy: multiple password policies in the same domain?
    ... > it under access to the GPO. ... The conflict only happens when both policies ... results in having the policy denied. ... > user accounts it affects be able to read it and have "apply ...
    (Focus-Microsoft)
  • Re: Password Policy Basics
    ... but assumed the POLICY would be applied to ALL ... so lcoal machines might start enforcing that policy on ... No, the local accounts are not effected by the domain policy, except you link the policy also to the OU like Florian states. ... I was thinking of service accounts on the servers... ...
    (microsoft.public.windows.group_policy)