If you use ldp and bind to a DC in your domain and then open the Domain NC head 
(Ctrl+T), can you paste the spew that shows up on the right?

Thanks,
Brian Desmond
br...@briandesmond.com

w – 312.625.1438 | c   – 312.731.3132

From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
Sent: Tuesday, April 19, 2011 7:52 AM
To: NT System Admin Issues
Subject: msDS-MaximumPasswordAge


So I have a 2008 granular pw policy set on an OU, it applies to a security 
group properly and all of the settings in the policy work except the Max 
Password Age. It is set to (never). Yet in a year like clockwork the password 
expires and the account is prompted to change the password. There are no other 
policies in the domain that even come close to saying a password expires in a 
year. Any ideas?

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Reply via email to