Service Accounts and Administrator account protection

  • Thread starter Thread starter Andrew
  • Start date Start date
A

Andrew

Can someone explain how you create the account policy settings in the
default domain policy yet protect the service accounts and administrator
accounts from these settings.

thanks,
AH
 
Andrew said:
Can someone explain how you create the account policy settings in the
default domain policy yet protect the service accounts and administrator
accounts from these settings.

thanks,
AH

I could be wrong on this, but I don't think you can. I believe that the
domain account settings are for all accounts in the domain. For
example, if you set the default domain GPO to lock user accounts after X
bad password attempts, this applies for all accounts in the domain,
including any service accounts, etc. Of course, the built-in
administrator account cannot be locked out, so that's kind of a special
case.


matt
 
Back
Top