Answer

al · Guest

The response didn't explain it. Anyhow, what I found out might help
someone else down the road. So here it is:

Password Never expires is a flag on a user. It is a schema attribute
that is applied to the user. A GPO cannot control this (not in
w2k3). The Default Domain policy that requires a password change
every days (Maximum Password Age) is a different value. It is not
applied to a domain user. This value is for all computers that are on
the domain and when a user logs on to the computer, they are required
to change their password. This was originally for local accounts and
domain PC's - as a way to control passwords (allowing for backwards
compatibility). Anyhow, the Maximum Password Age is a calculated
value. When you set an account to "password never expires" then the
value is set to infinity (basically).