administrator password expire - how to overcome

[landak]

Hi ...

I have an AD configured, the local policy is set up to
have a password expire of 42days, but the domain policies
is not define.

My administrator password keeps on expiring every end of
the month or 42 days. is this because of the local
policies?

if yes how can i overcome this, so that the administrator
password will not expire but only affect the users account
password.

thank you
-landak-

 

[ys@work]

1. Goto AD Users & Computers
2. Open the 'Administrator' properties page.
3. Goto the 'Account' tab.
4. Check 'Password never expires'.

For member server, use 'Computer Management'=>'Local Users & Groups'.

 

[landak]

Thank you for the explaination ...

FYI, i've tried that. but the 'Password Never Expires' box
is grayed out. the only option available for me to choose
is

1. 'user must changed password at next logon'
2. 'user cannot change password'

the rest of the option is grayed out and not available for
me to choose.

any other solutions?

Thank you n rgds,
-landak-

 

[Jerold Schulman]

Hi ...

I have an AD configured, the local policy is set up to
have a password expire of 42days, but the domain policies
is not define.

My administrator password keeps on expiring every end of
the month or 42 days. is this because of the local
policies?

if yes how can i overcome this, so that the administrator
password will not expire but only affect the users account
password.

thank you
-landak-

Try tip 570 in the 'Tips & Tricks' at http://www.jsiinc.com

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

 

[ys@work]

Yeap. Realized that as well. For other users, it's ok right?
Something peculiar with the administrator's account. Still hunting around
for an answer to that. Will update you if i manage to find it.

 

[ys@work]

Hi Taufik,

Finally find a way out
You can use the following vbs to achieve that:

Const ADS_UF_DONT_EXPIRE_PASSWD = &H10000
Set usr = GetObject("LDAP://CN=administrator,CN=Users,DC=Domain,DC=Com")
flag = usr.Get("userAccountControl")
newFlag = flag Or ADS_UF_DONT_EXPIRE_PASSWD
usr.Put "userAccountControl", newFlag
usr.SetInfo

Replace the LDAP with the DN of the administrator account.

As to why the Administrator's account properties are grayed out, still no
idea