Re: Passprop.exe

From: Jeff Qiu (jefffqiu_at_online.microsoft.com)
Date: 05/02/03 

Date: Fri, 02 May 2003 09:50:53 GMT

Hi Ray,

Based on the /? output of the PASSPROP, by default, I believe this policy
/complex applied to all domain users.

========================================================
Displays or modifies domain policies for password complexity and
administrator lockout. PASSPROP [/complex] [/simple] [/adminlockout]
[/noadminlockout] /complex Force passwords to be complex,
requiring passwords to be a mix of upper and
lowercase letters and numbers or symbols.
/simple Allow passwords to be simple. /adminlockout
Allow the Administrator account to be locked out.
The Administrator account can still log on
interactively on domain controllers. /noadminlockout Don't allow
the administrator account to be locked out.
Additional properties can be set using User Manager or the NET ACCOUNTS
command. ========================================================

I believe it functions the same as PASSFILT.DLL on this policy.

Passprop sets the SAM password policy. Passfilt.dll is a filter that hooks
the
password change event and rejects the password if it doesn't meet its
quality
factors. Passfilt.dll is really just a sample showing how a customer can
write
their own so they are not dependent on our quality criterion.

They both provide the same functionality. The reason there are both is
because we
came out with passfilt.dll first, then we added built-in support in the OS
for the
same thing, which passprop.exe allows you to implement/modify.

Regards,

Jeff Qiu
jefffqiu@online.microsoft.com
Online Support Professional
Microsoft Corporation

This posting is provided Ħ°AS ISĦħ with no warranties, and confers no
rights.

--------------------
>Reply-To: "Ray" <reply_in@newsgroup.only>
>From: "Ray" <reply_in@newsgroup.only>
>References: <05e101c30e73$01539a70$2f01280a@phx.gbl>
<iqQJNF8DDHA.2556@cpmsftngxa06.phx.gbl>
>Subject: Re: Passprop.exe
>Date: Thu, 1 May 2003 11:41:14 -0400
>microsoft.public.win2000.security
>
>Hi Jeff,
>
>Can you advise whether PASSPROP's switch to force complex passwords applies
>to just the administrator account or to all domain accounts. I'm kind of
>confused as to why I would want to install PASSFILT.DLL when I could just
do
>it with PASSPROP /complex.
>
>Thanks,
>
>Ray
>
>"Jeff Qiu" <jefffqiu@online.microsoft.com> wrote in message
>news:iqQJNF8DDHA.2556@cpmsftngxa06.phx.gbl...
>> Hi Mike,
>>
>> Thank you for your post!
>>
>> The passprop.exe is a tool in NT ResKit.
>>
>> As for the Support Policy, even those included with the Win2k ResKit,
they
>> are not supported under any Microsoft standard support program or
>services.
>>
>> Here is a link to a download that includes such policy for ResKit tools:
>>
>>
>http://www.microsoft.com/windows2000/techinfo/reskit/tools/new/adsizer-o.as
p
>>
>> For your convenience, I have included the following paragraphs:
>>
>> Support Policy
>> The SOFTWARE supplied in the Resource Kit Tools download site is not
>> supported under any Microsoft standard support program or service. You
>can,
>> however, report issues and bugs by sending e-mail to
>rkinput@microsoft.com.
>> Microsoft will, at its sole discretion, address issues and bugs reported
>in
>> this manner, and responses are not guaranteed.
>>
>> The SOFTWARE (including instructions for its use and all printed and
>online
>> documentation) is provided AS IS without warranty of any kind. Microsoft
>> further disclaims all implied warranties including, without limitation,
>any
>> implied warranties of merchantability or of fitness for a particular
>> purpose. The entire risk arising out of the use or performance of the
>> SOFTWARE and documentation remains with you.
>>
>> In no event shall Microsoft, its authors, or anyone else involved in the
>> creation, production, or delivery of the SOFTWARE be liable for any
>damages
>> whatsoever (including, without limitation, damages for loss of business
>> profits, business interruption, loss of business information, or other
>> pecuniary loss) arising out of the use of or inability to use the
SOFTWARE
>> or documentation, even if Microsoft has been advised of the possibility
of
>> such damages.
>>
>> Regards,
>>
>> Jeff Qiu
>> jefffqiu@online.microsoft.com
>> Online Support Professional
>> Microsoft Corporation
>>
>> This posting is provided Ħ°AS ISĦħ with no warranties, and confers no
>> rights.
>>
>> --------------------
>> >Content-Class: urn:content-classes:message
>> >From: "Mike" <a@a.com>
>> >Sender: "Mike" <a@a.com>
>> >Subject: Passprop.exe
>> >Date: Tue, 29 Apr 2003 10:16:00 -0700
>> >microsoft.public.win2000.security
>> >
>> >Anyone know if passprop.exe is still supported by MS, It
>> >does not seems to be in W2K ResKit anymore? But they are
>> >still referencing in documentation such as the lastest
>> >Windows 2000 Security Hardening Guide (april 10, 2003).
>> >
>> >Michel T.
>> >
>>
>
>
>