Solved

Windows Password Policy for Accounts with "Users cannot change password" checked

Posted on 2009-07-08
2
350 Views
Last Modified: 2012-05-07
We are thinking of enabling a domain password policy.  We have some account though that we do not want to reset their passwords every 90 days because they are used for services or kiosks.  Would they be exempt if we check "User cannot change password" under Active directory users and computers?
0
Comment
Question by:Spydergt
2 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 50 total points
Comment Utility
Check that and also check "password never expires"
They won't have to change it after 90 days that way.  
Thanks
Mike
0
 
LVL 74

Expert Comment

by:Glen Knight
Comment Utility
If you check the "user cannot change password" then all this will do is stop the user from changing the password meaning a phone call to the support desk when it expires.
You don't really need this setting, the one you need is "password never expires" as mentioned above.,
0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now