Password Policy NT Domain Level

Am just researching this topic in win2000.Spent quite a bit of time locating the literature but here is my input.win2000 and nt4.0 account policies are implemented on domain by domain basis.When you implement essentially every authenticated user participates in the security context.To answer your question NO you cannot.It is an good practise to rename admin account and allow password enforce.I am pretty sure this is correct,I was up late researching win2000 account policies.Literature-two books-two conflicting views.Hope it helps

If you set the "Password never expires" check box in the user properties dialog box in the account your admins will never be forced to change their passwords.

I had to laugh after I read the first answer, and was about to hit the answer button until I saw answer 2....anyway, if you do set the admin accounts to not expire, make sure that you require more characters and better complexity for the admin passwords. If the passwords don't ever have to be changed, there is more of a chance of someone using a brute force crack to get into the account.

At my company, we just implemented a new policy, and all of the higher end users have a more complex password requirement than any of the lower end users to beef up security.

Anyway, just my two cents.

Mike

This question was closed by the author