Active Directory Service Account Changes

Please see the following scheduled Information Technology Services (ITS) maintenance process:

Date: Monday, July 31, 2023
Start Time: 8:00 p.m.
End Time: 11:59 p.m.

The following work is being completed: ITS will update password policies affecting all accounts in the AD.WSU.EDU domain to ensure compliance with WSU executive policies.

Affected groups: All departments with an account in the AD.WSU.EDU domain.

All processes affected: Accounts that do not currently comply with new password policies (i.e., have a password older than 180 days) will be placed into a temporary exception group. Accounts placed in this group will be re-evaluated automatically every week. Once a password reset is complete or the account is added to the security exception group, the account will be removed from the temporary exception group.

ITS will also apply a default 180-day password expiration to accounts that do not identify as service accounts but reset their passwords within 180 days of July 31.

The “Password does not expire” checkbox for certain accounts will also be removed, if applicable. Going forward, password expiration exemptions will only be provided via security exception groups.

Duration of impact: Ongoing

Follow up steps customers need to take: Departments need to add service accounts to their service account groups to receive a password expiration policy of 365 days. For example, accounts in the ITS group ITS_R_Service-Accounts_Tier1-HIGH will receive the service account password policy.

Additional information: ITS will place accounts with an approved security exception for password expiration in a centrally managed group that will exclude them from the password expiration policy. All other policies, such as complexity, will still apply unless noted in the security exception. Please email crimsonservicedesk@wsu.edu for more information on requesting an account security exception.

Questions? Please contact Crimson Service Desk via email at crimsonservicedesk@wsu.edu or phone at 509-335-4357.