Setting to prevent administrators from overiding the domain policy for user accounts?
Is there a setting to prevent administrators from overiding the domain policy for user accounts? (e.g., Password Expiration) For example, if the domain policy sets passwords to expire in 90 days, it’s still possible to set user passwords to not expire. Is there a way to enforce the domain policy and not allow individual user settings? This is for Active Directory 2003. If you’re the domain administrator, yes, both of these are very possible to do. I don’t feel this is the case, but here’s how one would do it: Open Active Directory Users and Computers and locate the user you want to set to not expire their password. Double-click their account name, select the account tab and set “Password never expires” or something similar to that. (I don’t have it opened here). If you want a user to not receive GPO’s, you can set a different Organizational Unit (OU) to hold those users with different policies. You cannot set different password policies such as length, password aging, and reversible en
