default domain GPO, password aging

default domain GPO, password aging

Post by Derek » Fri, 20 Sep 2002 04:27:34



How does a GPO password policy affect service accounts, resource accounts
and Admin accounts? If the account is set for the password to "never"
expire, does this override the default domain GPO?

D.

 
 
 

default domain GPO, password aging

Post by John » Fri, 20 Sep 2002 10:11:10


The password policy effects all user accounts in the domain the same.
Setting the "Password never expires" flag on the user account does override
the "Maximum password age" password policy setting.


Quote:> How does a GPO password policy affect service accounts, resource accounts
> and Admin accounts? If the account is set for the password to "never"
> expire, does this override the default domain GPO?

> D.


 
 
 

default domain GPO, password aging

Post by Derek » Sat, 21 Sep 2002 00:13:45


So it goes without saying that maintaining the "password never expires" flag
for service accounts is a good idea.

Thanks for the confirmation.

D.


> The password policy effects all user accounts in the domain the same.
> Setting the "Password never expires" flag on the user account does
override
> the "Maximum password age" password policy setting.



> > How does a GPO password policy affect service accounts, resource
accounts
> > and Admin accounts? If the account is set for the password to "never"
> > expire, does this override the default domain GPO?

> > D.