One other question about this. My understanding is that I can only set one policy for the domain, and it will apply to everyone (we're not at a 2008 functional level, so I can't use fine grained password policies).
If I configure Group Policy to have passwords expire by have the "Password never expires" option selected for an account, which setting wins? Does the "Password never expires" option overrule the GPO? -----Original Message----- From: John Hornbuckle Sent: Wednesday, March 04, 2009 10:52 AM To: 'NT System Admin Issues' Subject: Password Policy Change Right now, our users' passwords don't expire. We're looking at changing that. My question is this... If I decide to enable password expiration, how is the expiration date calculated for my users? Let's say that today I set passwords to expire every 60 days. Will all current users' passwords expire 60 days from today? Or will all current users' passwords expire today, if those passwords are 60 days or older? John Hornbuckle MIS Department Taylor County School District 318 North Clark Street Perry, FL 32347 www.taylor.k12.fl.us ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
