1

By default on my SBS08, the Maximum password age is set to 1year. I'd like to disable this particular parameter for Domain Admin, not the entire policy (Default Domain Policy).

Is that possible ?

Thanks.

Bastien974
  • 1,896
  • 12
  • 44
  • 62
  • 1
    Sounds like a really bad idea... I'm guessing you're using the domain admin account for services (which you should be creating service accounts for), or just don't want to ever change the most important password in your whole network. – Chris S Jul 07 '10 at 14:37

1 Answers1

4

This is how to do it: http://technet.microsoft.com/en-us/library/cc770842(WS.10).aspx

joeqwerty
  • 109,901
  • 6
  • 81
  • 172
  • 1
    Or for those that don't follow links, that's linking to the step-by-step guide to Fine Grained Password Policies in AD. It is EXACTLY how you set password policies domain-wide, and still exempt your admin/utility users. Beats the pants off of the old way. – sysadmin1138 Jul 07 '10 at 14:11