Service Accounts and Administrator account protection

[Andrew]

Can someone explain how you create the account policy settings in the
default domain policy yet protect the service accounts and administrator
accounts from these settings.

thanks,
AH

 

[Matthew Swanson]

Can someone explain how you create the account policy settings in the
default domain policy yet protect the service accounts and administrator
accounts from these settings.

thanks,
AH

I could be wrong on this, but I don't think you can. I believe that the
domain account settings are for all accounts in the domain. For
example, if you set the default domain GPO to lock user accounts after X
bad password attempts, this applies for all accounts in the domain,
including any service accounts, etc. Of course, the built-in
administrator account cannot be locked out, so that's kind of a special
case.


matt