Re: Administrator Password Never Expires

From: Marco (tired.of.spam_at_somemail.com)
Date: 06/23/04 

Date: Wed, 23 Jun 2004 16:36:22 +0200

it could be related to accounts created at OS install. Have you tried to
create an account and make it member of the same groups? I believe (but I
have not tested ..) that that way you should be able to set/clear the
option.

cheers,

Marco 

-- 
Execute applications with elevated privileges [ www.neovalens.com ]
--
"MCSEStretch" <MCSEStretch@discussions.microsoft.com> wrote in message
news:AE0CFCE4-1925-4B4F-986C-C69F2DC97C42@microsoft.com...
> It would appear when auditing various domains that the Administrator
account in the domain has the "password never expires" block checked and the
box is disabled (read:  greyed out) so that setting cannot be changed to
make the domain administrator password expire.
>
> Is there a way to make the account expire (or at least ask/force the
account to change the password)?
>
> Thanks in advance!
> Jeremy Shelley, MCSE, CISSP
>
> P.S. I know it's not exactly a good idea to have your Domain Administrator
account expire but governmental rules are governmental rules.

Relevant Pages

  • EFS Recover Agents Unable to decrypt files
    ... Default Domain administrator and additional domain administrator have ... Created a test file on a workstation by a test account with Domain User ... Recovery Agents I performed the process described in "Encrypting File System ...
    (microsoft.public.win2000.file_system)
  • Re: Administrator Password Never Expires
    ... network logon attempts but never to console logon at a domain controller. ... Windows 2003 you can disable the built in administrator account except to ... I know it's not exactly a good idea to have your Domain Administrator ... account expire but governmental rules are governmental rules. ...
    (microsoft.public.win2000.security)
  • Re: [Full-disclosure] TTG0602 - Alt-N WebAdmin MDaemon Account Hijacking
    ... with MDaemon v9.0.6, earlier versions are ... WebAdmin is a remote administration utility which allows administrators to ... It is possible for a domain administrator within the default domain of a ... MDaemon server to gain access to the server's "MDaemon" account through the ...
    (Full-Disclosure)
  • Re: Not using a domain admin ID when joining the domain
    ... It has to be a domain administrator or a domain user account with delegated control like described in the articles. ... I used a network sniffer to verify that when the client tries to join ... This is denied by the domain controller, ...
    (microsoft.public.windows.group_policy)
  • Re: Loca Administrator "locked out"
    ... In this case you should be able to logon with domain administrator ... Create new user account in domain. ... Once logged on change the policy. ...
    (microsoft.public.win2000.security)