Technical Tip: How to exclude a local admin account from password expiration

Create two user groups and two password policies. Assign password policy1 to general users and password policy2 to privileged users.

In this scenario, the FortiAuthenticator has one admin account & one user account.

To create a new User Group:

• Go to Authentication -> User Management -> User Groups and select Create New.
• Assign the Test user to Group1 & Admin user to Group2.

To create Password Policies:

Go to Authentication -> User Management -> User Groups and select Passwords.

Assign the Password Policy to Group2:

Go to Authentication -> User Management -> User Groups -> Group2 and select Password Policy.

The change will be reflected in the logs via Logging -> Log Access -> Logs as well.