Nick Urbanik wrote:

What is the best/right way to exempt system users (entries that have the simpleSecurityObject objectclass) from the ppolicy default policy?

Is it to create another policy without restrictions and specify that each system user should use that policy using pwdPolicySubentry?

Yupp.

Ciao, Michael.