SOLVED

Password never expires on sensitive accounts

%3CLINGO-SUB%20id%3D%22lingo-sub-701891%22%20slang%3D%22en-US%22%3EPassword%20never%20expires%20on%20sensitive%20accounts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-701891%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20know%20there%20are%20million%20and%20one%20ways%20to%20do%20this%20via%20powershell%20and%203rd%20party%20tools%20but%20would%20it%20be%20possible%20to%20have%20ATA%20alert%20when%20a%20sensitive%20account%20has%20the%20%22password%20never%20expires%22%20flag%20set.%26nbsp%3B%20We%20have%20a%20tight%20password%20polices%20on%20admin%20accounts%20we%20assume%20that%20this%20flag%20on%20our%20admin%20account%20is%20a%20IoC.%26nbsp%3B%20Would%20be%20nice%20to%20have%20a%20single%20tool%20to%20do%20this.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-711182%22%20slang%3D%22en-US%22%3ERe%3A%20Password%20never%20expires%20on%20sensitive%20accounts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-711182%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F355592%22%20target%3D%22_blank%22%3E%40jlouden%3C%2FA%3E%26nbsp%3BThanks%20for%20the%20feedback!%26nbsp%3B%20Currently%20ATA%20does%20not%20have%20an%20alert%20for%20this.%26nbsp%3B%20I%20will%20however%20take%20your%20feedback%20for%20review.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hi,

 

I know there are million and one ways to do this via powershell and 3rd party tools but would it be possible to have ATA alert when a sensitive account has the "password never expires" flag set.  We have a tight password polices on admin accounts we assume that this flag on our admin account is a IoC.  Would be nice to have a single tool to do this.

1 Reply
Highlighted
Best Response confirmed by jlouden (Occasional Contributor)
Solution

@jlouden Thanks for the feedback!  Currently ATA does not have an alert for this.  I will however take your feedback for review.