How to Disable Automatic Machine Account Password ChangesLast reviewed: March 27, 1997Article ID: Q154501 |
The information in this article applies to:
WARNING: Using Registry Editor incorrectly can cause serious, system-wide problems that may require you to reinstall Windows NT to correct them. Microsoft cannot guarantee that any problems resulting from the use of Registry Editor can be solved. Use this tool at your own risk.
SUMMARYAs a part of Windows NT security, machine account passwords are changed every seven days. This article describes how an administrator can disable automatic machine account password changes. WARNING: By disabling machine account password changes, you are giving up some security because the secure channel is used for pass-through authentication. If someone discovers a password, he or she could potentially perform pass-through authentication to the domain controller.
MORE INFORMATIONYou may want to disable weekly machine account password changes for any of the following reasons:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\ ParametersIn Windows NT version 4.0, you can disable the machine account password change by setting the registry entry RefusePasswordChange to 1 in the following registry key on all domain controllers in the domain rather than on all workstations:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\ ParametersNOTE: This change refuses password change requests only from Windows NT workstations (or Windows NT Member Servers) running Windows NT version 4.0 or later. NOTE: After the first attempt to change the password, setting RefusePasswordChange to 1 prevents the workstation from further attempts to change the password (by returning a distinct status code), but the workstation will try again in one week. Setting RefusePasswordChange to 1 stops the replication traffic, but not the client traffic. Setting DisablePasswordChange to 1 stops both client and replication traffic. By disabling automatic machine account password changes, you can set up two (or more) installations of Windows NT on the same computer using the same machine account. To do this, use the following steps:
|
Additional query words: prodnt
© 1998 Microsoft Corporation. All rights reserved. Terms of Use. |