Disablepasswordchange windows server 2003




















The global version of this hotfix installs files that have the attributes that are listed in the following tables. GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes. For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:.

Windows XP and Windows Server file information Windows Server file information notes In addition to the files that are listed in these tables, this hotfix also installs an associated security catalog file KB number. Need more help? Expand your skills. Get new features first. Was this information helpful? Yes No. Thank you! Any more feedback? The more you tell us the more we can help.

WARNING] If you disable machine account password changes, there are security risks because the security channel is used for pass-through authentication. If someone discovers a password, he or she can potentially perform pass-through authentication to the domain controller. You may want to disable the default automatic machine account password changes for any one of the following reasons:.

You want to reduce replication occurrences. As a side effect of automatic machine account password changes, a domain with many client computers and domain controllers can cause replication to occur on a frequent basis. You can disable automatic machine account password changes to reduce replication occurrences. You have two separate installations of Windows NT or Windows on the same computer in a dual-boot configuration. In this case, the only way to share the same machine account between the two installations of Windows NT or Windows is to use the default machine account password that is created when you join the domain.

If you frequently do a clean installation of Windows NT or Windows , you must have an administrator on the domain that can create the machine account on the domain. If that is a problem, you can leave the password of the machine account as the default. You can disable the machine account password changes on a workstation by setting the DisablePasswordChange registry entry to a value of 1.

To do so, follow these steps. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. This article describes how an administrator can disable automatic machine account password changes. Machine account passwords are regularly changed for security purposes. By default, on Windows NT-based computers, the machine account password automatically changes every seven days.

Starting with Windows based computers, the machine account password automatically changes every 30 days. If you disable machine account password changes, there are security risks because the security channel is used for pass-through authentication. If someone discovers a password, he or she can potentially perform pass-through authentication to the domain controller.

You may want to disable the default automatic machine account password changes for any one of the following reasons:. You want to reduce replication occurrences. As a side effect of automatic machine account password changes, a domain with many client computers and domain controllers can cause replication to occur on a frequent basis.

You can disable automatic machine account password changes to reduce replication occurrences. You have two separate installations of Windows NT or Windows on the same computer in a dual-boot configuration.

In this case, the only way to share the same machine account between the two installations of Windows NT or Windows is to use the default machine account password that is created when you join the domain. If you frequently do a clean installation of Windows NT or Windows , you must have an administrator on the domain that can create the machine account on the domain.

If that is a problem, you can leave the password of the machine account as the default. You can disable the machine account password changes on a workstation by setting the DisablePasswordChange registry entry to a value of 1.



0コメント

  • 1000 / 1000