RE: Changing the domain password policy

["Depp, Dennis M." <deppdm () ornl gov>]

Gary,

This is correct.

Denny

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Gary Collis
Sent: Thursday, February 01, 2007 3:47 PM
To: security-basics () lists securityfocus com
Subject: Changing the domain password policy

Hi All,

I wish to amend my windows domain policy to include passowrd complexity 
and minimum length. However I have a bunch of service accounts, of which

I do not know all. These passswords are set in AD to not expire. Am I 
right in thinking that the changes to the domain password policy will 
not effect the accounts that have this attribute set in AD, until these 
passwords are actually changed?

How do other people deal with service accounts and their adherence to 
domain password policys?

Thanks,