Account Password Policy

Account Password Policy

Hello, 
We have multiple local accounts that we manage on our devices, but the issue we are having is that not all accounts need the same Password Policy. We have a standard user policy and an elevated account policy.  What is the easiest way to assign different policies to different accounts?

In our Environment, we have over 6k devices with the agent installed (need the agent for a very Mobile workforce). When the agent is installed it will pull in every account that is on the device even if it is disabled. Because of this, we can have up to 6-8 accounts per device when I only need to manage 2 accounts. Currently, I have Dynamic groups created and I am changing 100 at a time. It has taken over 4 hours to modify one account type. This is also a very manual process and is not very sustainable or value-adding work. 

Does anyone have any guidance or suggestions?

Thanks!