Make domain passwords expire on domain

[Red Squirrel]

How would one go about making it so passwords expire after a certain time (ex 60 days). i know how to do it per user, but how would we globally set that? This is windows 2003 server.

 

[dphantom]

Using GPMC, look under Computer Configuration - Windows Settings - Security Settings - Account Policies - Password policy.

In a Windows 2003 domain, you can have only 1 password policy. This will normally be applied at the domain level.

 

[Red Squirrel]

Will this also control the per-user setting for if the password expires or not though? Also to complicate things more, some accounts still need non expiaring passwords. So wondering if there's a way to mass check them all, then we just manually go and uncheck the ones we don't want.

 

[imported_snikt]

Run ADUC (Active Directory Users and Computers). Select all the users or just the users you want to make the change. Right-hand click, and select Properties, you'll see all the options available.

 

[Red Squirrel]

I'll have to try that, figured that would not work and that I'd have to do 1 at a time.