Hi,
I have set up gpos and we are on win2k. A few days back I have set up a new
gpo only for account lockout and there are some mission critical service
accounts, I have added them to a security group and on the new policy I have
denied the policy for the security groups, but it did not help me, the
service accounts are getting locked out. Is there anyway to exclude service
accounts so that the service accounts will not be locked?

In news:5557A702-7B61-4559-B3DE-(E-Mail Removed),
Abhi <(E-Mail Removed)> typed:
> Hi,
> I have set up gpos and we are on win2k. A few days back I have set up
> a new gpo only for account lockout and there are some mission
> critical service accounts, I have added them to a security group and
> on the new policy I have denied the policy for the security groups,
> but it did not help me, the service accounts are getting locked out.
> Is there anyway to exclude service accounts so that the service
> accounts will not be locked?

No, as mentioned in your other thread, not possible in 2000 or 2003. Create
a separate domain for them.


--
Regards,
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer

Infinite Diversities in Infinite Combinations

Having difficulty reading or finding responses to your post?
Instead of the website you're using, try using OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. Anonymous access. It's free - no username or password
required nor do you need a Newsgroup Usenet account with your ISP. It
connects directly to the Microsoft Public Newsgroups. OEx allows you
o easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject. It's easy:

How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

"Quitting smoking is easy. I've done it a thousand times." - Mark Twain