Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

By default on my SBS08, the Maximum password age is set to 1year. I'd like to disable this particular parameter for Domain Admin, not the entire policy (Default Domain Policy).

Is that possible ?


share|improve this question
Sounds like a really bad idea... I'm guessing you're using the domain admin account for services (which you should be creating service accounts for), or just don't want to ever change the most important password in your whole network. – Chris S Jul 7 '10 at 14:37
up vote 4 down vote accepted

This is how to do it:

share|improve this answer
Or for those that don't follow links, that's linking to the step-by-step guide to Fine Grained Password Policies in AD. It is EXACTLY how you set password policies domain-wide, and still exempt your admin/utility users. Beats the pants off of the old way. – sysadmin1138 Jul 7 '10 at 14:11

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.