Intel AMT Active Directory Objects

I would suggest checking the AMT documentation at:

http://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/

Here is what the Intel SCS 7.0 User Guide says:

"If the ADOU has a maximum password age password policy defined in AD, the password must be replaced before it expires."  So I think you set it in AD.

If you are using Intel SCS 7.0, page 15 of the User Guide (available in the download zip file) tells you how to schedule a maintenance task to reset the password.

I don't know the answer to the security implications, but I think they are greatly reduced if you set a password expiration policy.

Currently there is no way to do that, the only way to reset the AMT password is manually.

Youcannot set the system to remind you every 30 days or so.

Sorry about the delay on your security question.  I've entered an internal support request to our Intel AMT team get some help on this issue.  You should be getting a reply in a few days.

Building on what Adolfo said, the maintenance tasks to reset the AD object password depend on what software you are using.  Can you give me some more background on your implementation?  Are you provisioning with the Intel SCS?  If so, which version?

Ah, Ok.  You are in good shape then.  SCCM takes care of the maintenance of the AD objects for AMT and will make sure that passwords get changed automatically in accordance with any policies you have in place in the AD.