Unity account password policy

[ciscoforum]

Hi guys

Our customer want to set a password expiration policy for ccm and unity. Though I told him this is not good, especially the administrator acount for CCM and unity installation/msgstore account/directory service acocunt are the service account. As we know if we change these accout they have to be changed on the service logon also. So I told them we are not going to give policy to those accounts. We are only going to give policy to the ccmadministrator and unityadmin. Having said that, how can I do this just for ccmadministrator(CCM MLA) and unityadmin? Or you think we can set up policy for all the accounts?Thanks

[kechambe]

They can set a domain level password policy by editing the 'default domain security policy'. Inside the policy navigate to Security Settings > Account Policies > Password Policy. From there you will see the options to change.

The security policy is domain wide but you can override it for specific account by turning on 'password never expires' for the account in AD Users & Computers.

Let me know if you have any questions or if I didn't understand you.

Thanks,

Keith