Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

By default on my SBS08, the Maximum password age is set to 1year. I'd like to disable this particular parameter for Domain Admin, not the entire policy (Default Domain Policy).

Is that possible ?

Thanks.

share|improve this question
1  
Sounds like a really bad idea... I'm guessing you're using the domain admin account for services (which you should be creating service accounts for), or just don't want to ever change the most important password in your whole network. –  Chris S Jul 7 '10 at 14:37
add comment

1 Answer 1

up vote 4 down vote accepted

This is how to do it: http://technet.microsoft.com/en-us/library/cc770842(WS.10).aspx

share|improve this answer
1  
Or for those that don't follow links, that's linking to the step-by-step guide to Fine Grained Password Policies in AD. It is EXACTLY how you set password policies domain-wide, and still exempt your admin/utility users. Beats the pants off of the old way. –  sysadmin1138 Jul 7 '10 at 14:11
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.