I have a WindowsDomain resource which has user accounts created under it.

I want to schedule a password reset every X days for some of the user accounts under the WindowsDomain resource.

I can only seem to be able to schedule resets for the entire Resource and not individual accounts underneath the resource. For example, there are usernames which I do not want to reset (e.g. service accounts which can't be reset automatically due to application requirements, or user accounts I want to change on different schedules).

How do I pick out individual usernames from a WindowsDomain to reset?

Thanks.