password never expires ..

[TheLord]

Hi,

we have windows 2000 domains; a DC, A.DC, Exchange 2000 and ISA.

the manager asked me to make the accounts of all users' "password never expires".

i went to each user properties and put a tick on "Password never expires", and i went to "Default Domain Controller Policy" in the domain controller Active Directory and i changed the following:

under Windows Settings > Security Settings > Account Policies > Password Policy.

and i changed: (Maximum Password Age) to 0 zero and (Minimum Password Age) to 0 zero.

after like 1 month, the manager called me and i found out on his screen that his password expired !! ?

i don't know what do i have to change to make sure it won't expire again .

any help is much appreciated .

TiA

[catgate]

I hope you do not mind me asking this. Is it true that you really are my Shepherd??

And also will I never want?

[homecomputeraid]

I believe the setting you're looking for is under Active Directory Users and Computers. Go to the individual user's account and there should be a check box for Password Never Expires. It's under the Account tab of the user's Properties.

You're aware that this is not a good thing to do security wise?

[TheLord]

homecomputeraid,

as i've mentioned in my post, i've already done "Password Never Expires" on all users.. but it expires again .. and yes, i know it's not advisable to have a permanent password but that's his request ..

any other ideas you would like to share ?

TiA

[homecomputeraid]

the manager asked me to make the accounts of all users' "password never expires".

Sorry I missed that the first time! :oops:

Are the OS's on all the machines Windows 2000 or XP? If they're 98 on some of the desktops, could they have gotten out of sync somehow? You could try deleting the .pwl files on 98 machines.

I usually enter a blank local password for 98 machines that are on a domain. Then you're only asked for a password once.