Set "password never expires" for Service Account

[Puspanjali]

Hi Team,

For service account we wanted to set password status as "never expires"

So, I created the password policy to set the password status as "never expires"

Create Account JSON

But After Owner sets the initial password for the service account  in ARS, status is changing to as below

Could the team help me to know, How I can make the password status "never expire". 

[dgandhi]

Are you passing userAccountControl in update account json also? Please check if update account task is changing the value in target?

Thanks

[Manu269]

Please refer to the below post and keep in the mind that the UAC values are additive.

https://forums.saviynt.com/t5/general-discussions/how-can-we-make-ad-password-as-user-cannot-change-...

https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/useraccountcontrol-manipulate...

[Puspanjali]

Hi Manish,

Thank you for the above reference, I could able to create the account with a "never expire" status.

But after that, if we are setting the password via ARS then it automatically changes the status to 512 "must change password in next logon"

Is there any extra JSON I need to configure so that Saviynt stops rewriting the status to 512"Must change password in next logon"