Hi Kyle, as far as I understand you should not be using the shadowAccount objectClass attributes to get this behaviour but you should be configuring the password policies instead. Best Regards, Jo