We are running a 2003 AD on 2 domain controlers. I have about 45 clients. The problem is on my managers AD account the password wants to expire every day. I've looked 'til I'm blue in the face and cant figure this one out. The only place I havent looked is on his local machine..any one run into this one?
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Password Expiration
- Thread starter pwrrpdc
- Start date
Unless you are using a custom or 3rd party product, password policies can only be set at the domain level for domain accounts.
If you are using the GPMC (group pol mgmt console) as recommended, you can right click on the domain and specify which domain controller to read the policies from. If replication is functioning correctly, then the policies will all be the same. If you have had a problem with replication, the policies could be different.
This is not very common but I did just have it happen to me.
Other option could be that his user acct is somehow corrupted. Depending on how many resources he has directly assigned rights to (as opposed to group memberships) you may want to just create a new acct for him and move on. The profile (Documents and Settings) will need to be copied as well.
If you are using the GPMC (group pol mgmt console) as recommended, you can right click on the domain and specify which domain controller to read the policies from. If replication is functioning correctly, then the policies will all be the same. If you have had a problem with replication, the policies could be different.
This is not very common but I did just have it happen to me.
Other option could be that his user acct is somehow corrupted. Depending on how many resources he has directly assigned rights to (as opposed to group memberships) you may want to just create a new acct for him and move on. The profile (Documents and Settings) will need to be copied as well.
- Status
Similar threads
- Locked
- Question