Password policy

We have Windows 2003 domain and we are in the process of implementing
password policy across the domain.

What will be the suggested/ recommended pathway to exclude administrator/
special purpose admin related accouts from this password policy?

Thanks

Florian
Tue Jul 08 11:21:57 PDT 2008

Howdie!

TSAM schrieb:
> We have Windows 2003 domain and we are in the process of implementing
> password policy across the domain.
>
> What will be the suggested/ recommended pathway to exclude administrator/
> special purpose admin related accouts from this password policy?

Make sure you check the "Password does not expire" box in those account
properties. That'll do the trick.

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Use a newsreader! http://www.frickelsoft.net/news.html
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

Meinolf
Tue Jul 08 12:41:20 PDT 2008

Hello TSAM,

On the account properties use "Password will never expire". That's the only
way you have, except you use some 3rd party tools.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> We have Windows 2003 domain and we are in the process of implementing
> password policy across the domain.
>
> What will be the suggested/ recommended pathway to exclude
> administrator/ special purpose admin related accouts from this
> password policy?
>
> Thanks
>

Brandon
Tue Jul 08 18:48:11 PDT 2008

TSAM wrote:
> We have Windows 2003 domain and we are in the process of implementing
> password policy across the domain.
>
> What will be the suggested/ recommended pathway to exclude administrator/
> special purpose admin related accouts from this password policy?
>
> Thanks

I don't have a system in front of me to check how to do it but I was
recently shown that it is possible to make group policies not apply to
certain groups even if they are located in an OU that is being affected
by a group policy. If the "password never expires" method is not
sufficient for you then you can try exempting people from the policy. I
believe it is a setting on the policy itself, not on the group.

Maybe someone else can vouch for this before you spend time on it.

Jack
Wed Jul 09 07:20:47 PDT 2008

On Jul 8, 2:19 pm, TSAM <T...@discussions.microsoft.com> wrote:
> We have Windows 2003 domain and we are in the process of implementing
> password policy across the domain.
>
> What will be the suggested/ recommended pathway to exclude administrator/
> special purpose admin related accouts from this password policy?
>
> Thanks

Without the use of third-party tools, the only option that you have
would be to select "Password Does Not Expire" in the properties of
those specific users.

Regards,
Jack Doyle, Systems Engineer
ScriptLogic Corporation
http://www.scriptlogic.com