vivo123
asked on
domain password policy
If I apply a domain password policy, will this affect the local admin accounts on the servers and/or computers. I only want to apply to the domain users passwords. I have local admin accounts on servers and a few computers that need to stay the way they are at this time.
Also, should I have to tick "change at next logon" in ADUC to force the users to use the new policy.
Also, should I have to tick "change at next logon" in ADUC to force the users to use the new policy.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks, I just wanted to make sure my thinking was correct on this.
ajaasta,
Password policy can only be applied at the domain level, not at the OU level.
Password policy can only be applied at the domain level, not at the OU level.
oops, JConchie you are right! My mistake on that...
ASKER
Quick follow up, does it apply to all domain accounts including domain administrator accounts,etc.
Yep
Only when the user changes (or is forced to change) his/her password, the new policy becomes effect.
Put your admins to an other OU in the Active Directory and plain users to an other and apply the new password policy not to the domain group policy but on the user's OU.