Active Directory Password Policy for functional accounts?

[Rick Baker <richard.r.baker () GALLAUDET EDU>]

We are wondering what other higher education institutions are doing with
their functional accounts in active directory.  The functional accounts are
for service purposes that we implemented 180 days password policy but
service could break after the password expires - some are asking to enable
"password never expires" (PNE) on these accounts.

Other question is if we enable PNE on accounts, how do you keep track of
which accounts are being in use or not for "housekeeping" to keep our
active directory clean?

Rick