resetting computer accounts

[kb]

the default policy in ads/w2k for resetting computer
account passwords is 30 days. Our labs are running
software (deep freeze) that only allows the passwords to
reset every 999 days.

What are the consequences of changing the default password
interval to 999 days on the domain? This will impact all
domain members computers, servers, dc's, etc.

We also have an nt 4 domain that trusts our w2k ads domain
(one way).
Thanks in advance for any opinions/advice,
Karen

http://www.microsoft.com/windows2000/techinfo/reskit/en-
us/default.asp?url=/windows2000/techinfo/reskit/en-
us/regentry/32420.asp

http://www.microsoft.com/windows2000/techinfo/reskit/en-
us/default.asp?url=/windows2000/techinfo/reskit/en-
us/regentry/58441.asp

 

[Danny Sanders]

What are the consequences of changing the default password

interval to 999 days on the domain? This will impact all
domain members computers, servers, dc's, etc.

You won't be prompted to change passwords for 999 days. The default domain
policy will affect all computers on the domain.
Account policies are (password settings is part of account policies) 1 to a
domain (in Win 2k at least).
Setting a separate password policy at the OU level will only take affect
if/when the computers in that OU are logged on locally, they do not come
into effect when logging on to the domain.

hth
DDS W 2k MVP MCSE