HELP - can't disable psswd policy on domain

[Guest]

In Windows 2000 domain I was trying to apply a password policy to
departmental OUs but found out later that they will not work.
The only way to enforce password policies in a domain is to apply the GP to
the Default Domain Policy.
I did this and set it to use complexity requirements, etc but I found out
later that I cannot block inheritance. I don't want this policy applying to
my Administrator account as this would be a pain to change its psswd on all
servers that are running services as Administrator (I know this is bad
security practice).

Now I cannot disable this password policy !
I tried to set them back to Not Defined but they still apply
I tried to disable the ones that had that option but they still apply
I have even ran (secedit /refreshpolicy machine_policy) on the domain
controller but they still apply.

Help !
What can I do?

Shoshin

 

[Danny Sanders]

I don't want this policy applying to

my Administrator account as this would be a pain to change its psswd on all
servers that are running services as Administrator (I know this is bad
security practice).

Set the Admin account password to never expire. For security purposes you
should manually change the password periodically.

You can also create accounts to run the services with and not use the Admin
account.

hth
DDS W 2k MVP MCSE