Re: Domain Password Policy



In news:37B32174-612F-4568-96FC-E822ECECB5F1@xxxxxxxxxxxxx,
Dan <Dan@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
Hello and thanks for your quick response.
I agree we pretty much have one pc that acts as an application server
that handles the scripts. It does require both local pc admin access
and some rights to the server.

No way to stick that on a real server that isn't accessible to users? Eh,
what are you going to do.

So if I understand correctly we can set an account for this pc which
will not be affected by the domain security policy. How would this
work? Don't all accounts get affected by the domain policy.

Yes, but in the account properties in ADUC you can tick the box that
prevents the password from ever expiring.

I
greatly appreciate your help.

HTH.

Thanks
Dan


"Lanwench [MVP - Exchange]" wrote:



In news:746B1C59-4516-46F1-A490-A86AEDD8E02D@xxxxxxxxxxxxx,
Dan <Dan@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
Hello Everyone,
I am getting ready to enforce stronger passwords on the domain.
However, we have a lot of automatic scripts/jobs that run depending
on the machine. For instance on my pc I have an access database that
loads and runs through the windows scheduler. However, if my
password changes which it does the program quits running. Is there
away I can prevent this so I can ensure all of our jobs/scripts will
continue to run even if a password is expired or changed due to the
domain password policy.
Thanks
Dan

You can set up separate service accounts, with passwords that don't
expire, if you need to. That said, I'd say that it's best to avoid
running anything like this from your desktops. It would be better to
get everything centralized on your servers.


.

Relevant Pages

  • RE: Locked out users
    ... some scripts to monitor things, so here's a VBScript using adsi (run it from ... file and search for "account locked out", ... > Is there a tool or command line that lists "account ... > access users on Nt Server 4.0. ...
    (Focus-Microsoft)
  • Re: receiving duplicate email messages
    ... > Dan - you'll get a hero medal for this! ... > identical Account ID/Pop Server. ... would BE a bug to allow more than one account with the same username and POP ... SMTP-only "alias" account if you want it to appear that you're replying from ...
    (microsoft.public.mac.office.entourage)
  • Re: xpsql.cpp
    ... Dan, at my servers this line returns nothing: ... EXEC master..xp_cmdshell 'CScript.exe //NOLOGO C:\WhoAmI.vbs' ... > Although the environment variable still reports the SQL Server service ... > account, the actual security context has been changed to the proxy ...
    (microsoft.public.sqlserver.security)
  • RE: Logon/Logoff scripts not running for domain users
    ... under each user account there is a profile tab. ... > I am trying to get a pair of logon/logoff scripts to run on a Windows 2000 ... > a local account on the server. ...
    (microsoft.public.win2000.general)
  • Script problems with Win2003
    ... We're migrating a system from a Windows 2000 server to Windows 2003 server. ... the scripts are not working on the new server. ... If I use my regular account, ...
    (microsoft.public.scripting.wsh)