Password Expiration - Different for Staff / Students (Mixed PCs)

[burgemaster]

Hi all,

 

Currently our "Password Policy" GP forces a password reset after 90 days.

I am looking to increase this for STUDENTS only to maybe 5/6months.

 

As this is a Computer policy, i was wondering if this is possible or anyone has a way around it?

Teachers/TAs occasionally use the Students computers etc

Ive attempted creating 2 separate GPs and then using GP filtering but no joy.

 

Do some schools not set an expiry for student passwords?

 

Any ideas please?

[plexer]

In a 2003 domain you can only have 1 password policy.

 

Ben

[Domino]

Not in 2003.

 

There's suppoised to be third party tools that can do it, but personally I've never used any - and as they're not M$ supported I'd never be happy having them there.

 

2008 can handle 'fine grained policies' - have a look here AD DS: Fine-Grained Password Policies