Re: Administrator Password Never Expires

From: Steven L Umbach (n9rou_at_nscomcast.net)
Date: 06/23/04 

Date: Wed, 23 Jun 2004 16:14:24 GMT

I believe that is hard coded into the operating system and can not be easily
changed [I know of no way]. You can use passprop to lockout that account to
network logon attempts but never to console logon at a domain controller. In
Windows 2003 you can disable the built in administrator account except to
safe mode logon. --- Steve

"MCSEStretch" <MCSEStretch@discussions.microsoft.com> wrote in message
news:AE0CFCE4-1925-4B4F-986C-C69F2DC97C42@microsoft.com...
> It would appear when auditing various domains that the Administrator
account in the domain has the "password never expires" block checked and the
box is disabled (read: greyed out) so that setting cannot be changed to
make the domain administrator password expire.
>
> Is there a way to make the account expire (or at least ask/force the
account to change the password)?
>
> Thanks in advance!
> Jeremy Shelley, MCSE, CISSP
>
> P.S. I know it's not exactly a good idea to have your Domain Administrator
account expire but governmental rules are governmental rules.

Relevant Pages