Answer
The response didn't explain it. Anyhow, what I found out might help
someone else down the road. So here it is:
Password Never expires is a flag on a user. It is a schema attribute
that is applied to the user. A GPO cannot control this (not in
w2k3). The Default Domain policy that requires a password change
every days (Maximum Password Age) is a different value. It is not
applied to a domain user. This value is for all computers that are on
the domain and when a user logs on to the computer, they are required
to change their password. This was originally for local accounts and
domain PC's - as a way to control passwords (allowing for backwards
compatibility). Anyhow, the Maximum Password Age is a calculated
value. When you set an account to "password never expires" then the
value is set to infinity (basically).
.
Relevant Pages
- Re: Default Domain Policy - Password Chg 90 days
... You are speaking about password history, which is different from the age ... Password Never Expires If selected, the password for this account never expires. ... policy that contains the setting "Maximum password age" 90 days really ...
(microsoft.public.windows.server.active_directory) - Re: Force Password Changes in mixed mode A/D
... expires after 30 days but I was able to make my password never expire in ... > considered a local policy and be for the local accounts. ... > Global Policy at the Unit level be for the Domain account ...
(microsoft.public.win2000.security) - RE: Password Policy Change - When Into Effect
... In Windows Server 2003 group policy, we can set a maximum password age. ... The user account password is not set to Password Never Expires. ...
(microsoft.public.windows.server.sbs) - Re: How to change PASSWORD expiration settings with command line?
... Now i have to write a script to do this, on all my local accouns (FTP ... External Users) with names begining with "ftp" or to generate a .TXT of users ... I have several LOCAL accounts created and i wanna to disable PASSWORD ... I found a Script (Modify a Local User Account So It Never Expires) in ...
(microsoft.public.windows.server.scripting) - Re: How to change PASSWORD expiration settings with command line?
... I have several LOCAL accounts created and i wanna to disable PASSWORD ... expiration via Script ... I found a Script (Modify a Local User Account So It Never Expires) in ... Servers that are not DC's do have local accounts. ...
(microsoft.public.windows.server.scripting) |
|
