Complex password policy - service accounts

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi

I want to set a complex password policy that changes every 90 days or so, which I can do.

BUT how do I account for the many service accounts on my domain such as SQL sa accounts etc, as these are non interactive they will get locked every 90 days unless someone logs in as them and sets the password.

Any idea on ways to solve this, I presume a second domain is one way, any others?
Putting them in another OU won't work as this policy can only be domain level.

Will manually setting 'password never expires' on the individual account overide?

Thanks

M

 

[Guest]

Archived from groups: microsoft.public.win2000.group_policy (More info?)

> Will manually setting 'password never expires' on the individual account
overide?


Yes. In the interest of security you should manually change these passwords
periodically.

hth
DDS W 2k MVP MCSE

"huff-n-puff" <huffnpuff@discussions.microsoft.com> wrote in message
news8933919-D2E6-4AAF-8826-EFA36A3201DF@microsoft.com...
> Hi
>
> I want to set a complex password policy that changes every 90 days or so,
which I can do.
>
> BUT how do I account for the many service accounts on my domain such as
SQL sa accounts etc, as these are non interactive they will get locked
every 90 days unless someone logs in as them and sets the password.
>
> Any idea on ways to solve this, I presume a second domain is one way, any
others?
> Putting them in another OU won't work as this policy can only be domain
level.
>
> Will manually setting 'password never expires' on the individual account
overide?
>
> Thanks
>
> M
>