On our Active Directory server our Domain Administrator accounts are not forcing resets of passwords after 90 days as defined in our Group Policy:
All Domain Admins are on the group policy. Also, when we pull their expiration dates they are for several months ago. The expiration date has passed. Any ideas on what could be exempting Domain Admins from being forced to reset their passwords?
The users do not have a Password never expires checked.
This is defined in Default Domain Policy.
gpresult /h gpresult.html
on your domain controllers, does it show the settings in effect?1.
Password policies are Computer Configuration settings, not User Configuration settings.2.
Have you checked the properties of those user accounts to see if the "Password never expires" checkbox is checked?