cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

2982
Views
0
Helpful
3
Replies
kkaminsk
Cisco Employee

ISE Internal User Account - Never Expire

Folks,

Is it possible to have an internal user account (for T+ users) never expire AND to have the Users Password Policies in effect for the majority of the users (password expiration and account lockout durations)?  I have a customer looking to have a few service accounts only that never expire and still use the password policies for the rest.

1 ACCEPTED SOLUTION

Accepted Solutions
ldanny
Cisco Employee

You have the option of modifying the User and Password policies globally for internal users but not per user.

Have a look under

Administration > Identity Management > Settings > User Authentication Settings

View solution in original post

3 REPLIES 3
ldanny
Cisco Employee

You have the option of modifying the User and Password policies globally for internal users but not per user.

Have a look under

Administration > Identity Management > Settings > User Authentication Settings

So the answer then is that when I am using the global policies, I cannot then do a permanent per user account.  Correct?

You are correct pretty much. For ISE internal network access users, we may globally permit users not to expire and then set expired dates on individual user accounts as needed.

Please bring your feedback to our PM team.

Create
Recognize Your Peers
Content for Community-Ad

ISE Webinars


Miss a previous ISE webinar?
Never miss one again!

CiscoISE on YouTube