Link to home
Create AccountLog in
Active Directory

Active Directory

--

Questions

--

Followers

Top Experts

Avatar of Floyd_Droid
Floyd_Droid🇺🇸

How to change "Consider changing your password" where won't expire?
I have four (4) Server 2008 units. Two are domain controllers and the others just servers on the domain. In the AD I have the Administrator password to never expire. However only on  the non-DC servers (it would seem) I'm getting "Consider changing your password" (pic1) warning message;  even though I'm logged in as Administrator on the domain.

I tried to run Gpedit.msc

Computer Config ---> Windows Settings ---> Security Settings ---> Account Policy ---> Password Policy ---> Maximum Password Age

It's set for 42; I can't change it because it's "greyed out"

How do I fix this?

password-error.jpg

Zero AI Policy

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.

Avatar of Mike KlineMike Kline🇺🇸

Are you using the built-in administrator account or another DA account you created?  The password never expires should over ride the domain PW policy.

It is greyed out on the local machine because the PW policy is coming down from a group policy on the domain.  Don't change that because it will affect all users and you want those passwords to expire.
Avatar of Floyd_DroidFloyd_Droid🇺🇸

ASKER

The built in Administrator account.
Basically I'm logged into the domain as normal: Username: Administrator; Password: ***** ; Domain: Caprock.
Could it be talking about the Administor password on the local level I set when I first configured Windows 2008 on servers BEFORE I joined the domain?

if so... why is it only appear to be doing it on the NON-DC units?
Avatar of Mike KlineMike Kline🇺🇸

yeah I think it referring to the local acount.  It only happens on the non-dc units because dcs don't have local admin accounts

Thanks

Mike
Reward 1Reward 2Reward 3Reward 4Reward 5Reward 6

EARN REWARDS FOR ASKING, ANSWERING, AND MORE.

Earn free swag for participating on the platform.

Avatar of Floyd_DroidFloyd_Droid🇺🇸

ASKER

Okay... how do i tell the local account to not expire the password or to set it for unlimited time?
ASKER CERTIFIED SOLUTION
Avatar of ngailfusngailfus🇺🇸

Link to home
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.
Create Account
Avatar of Mike KlineMike Kline🇺🇸

Are  you the only one that uses the administrator account.  Just wondering, generally using the built-in or generic admin accounts is not a best security practice.

Thanks

Mike
Avatar of Floyd_DroidFloyd_Droid🇺🇸

ASKER

Thank you!
Free T-shirt

Get a FREE t-shirt when you ask your first question.

We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.

Active Directory

Active Directory

--

Questions

--

Followers

Top Experts

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.