I have added a global password policy which enforces password rotation for every 90 days. But there are two types of accounts:

  1. User Accounts - Enable Password rotation for 90 days
  2. Admin Accounts - No Password rotation

I don't want to enable password rotation for Admin Accounts but should enable for User Accounts. Please suggest a clean approach to achieve this.

Similar Problem: https://www.jamf.com/jamf-nation/discussions/18574/user-password-policies-on-non-ad-machines

(Global Policy = All Users except "admin")

  • Why the difference if it is a risk for user accounts then also a risk for admin – mmmmmm Nov 13 '18 at 9:11
  • this will be a chef admin user without an UI and behaves like an API user, is it possible to have two different profiles for each user ? – karthikselva Nov 13 '18 at 9:53

You must log in to answer this question.

Browse other questions tagged .