Nick Urbanik wrote: > What is the best/right way to exempt system users (entries that have the > simpleSecurityObject objectclass) from the ppolicy default policy? > > Is it to create another policy without restrictions and specify that > each system user should use that policy using pwdPolicySubentry? Yupp. Ciao, Michael.