I have added a global password policy which enforces password rotation for every 90 days. But there are two types of accounts:
- User Accounts - Enable Password rotation for 90 days
- Admin Accounts - No Password rotation
I don't want to enable password rotation for Admin Accounts but should enable for User Accounts. Please suggest a clean approach to achieve this.
Similar Problem: https://www.jamf.com/jamf-nation/discussions/18574/user-password-policies-on-non-ad-machines
(Global Policy = All Users except "admin")