Re: No LM Hash - no really

From: Miha Pihler (mihap-news_at_atlantis.si)
Date: 08/22/04 

Date: Sun, 22 Aug 2004 15:49:39 +0200

Ian,

Can you check the steps in this article. I will this in my lab now.

How to prevent Windows from storing a LAN manager hash of your password in
Active Directory and local SAM databases
http://support.microsoft.com/default.aspx?scid=kb;en-us;299656&sd=tech

Mike

"Ian Boyd" <admin@SWIFTPA.NET> wrote in message
news:uqmHE5EiEHA.3944@tk2msftngp13.phx.gbl...
> > > But on the down side, if you have two DC's, then if someone wants to
> disable
> > > LM hash storing, it is harder to implement.
> >
> > How do you figure?
>
> i figure it because people say that have to set it on ALL domain
> controllers. That means i have to set it more than once. Rather than
setting
> it on one domain controller, you have to set it on all.
>
>
> > If you use Group Policy to set this (which is all you need to do, you
do
> _not_ need to set this with both Group Policy and a reg setting) you only
> need to set this once.
>
> Yeah, that's what i would have thought. Bbut if you have been reading the
> thread, IT'S NOT WORKING.
>
> So in order to try to make it work, i'm setting everything everwhere i
can.
>
>

Relevant Pages

  • Re: No LM Hash - no really
    ... I will this in my lab now. ... > How to prevent Windows from storing a LAN manager hash of your password in ...
    (microsoft.public.win2000.security)
  • Re: AD sites and services
    ... A search for "Active Directory Sites" yeilds the following: ... After an Unsuccessful Domain Controller Demotion" ... http://support.microsoft.com?kbid=220140 "FRS Replication Protocol and Topology ... Windows 2000 Domain Controllers" ...
    (microsoft.public.win2000.active_directory)
  • RE: Internet Connection Wizard failing at Firewall Config and Secu
    ... You can use the Dcdiag.exe (Domain Controller Diagnostic Tool) included ... in Windows Support Tools to verify the AD status. ... Windows Server 2003 Active Directory Diagnostics, ...
    (microsoft.public.windows.server.sbs)
  • Site-tosite VPN Issue
    ... Windows Server 2003 domain controller ... Mixture of PCs running Windows 2000 Profressional with SP3 and Windows XP ... the VPN to the Windows Server 2003 domain controller. ... 12.7MB file from the server to the client PC. ...
    (microsoft.public.windows.server.networking)
  • RE: join server 2003
    ... Cannot Promote a Windows Server 2003 Domain Controller into a Windows 2000 ... Make a backup of the schema master. ...
    (microsoft.public.win2000.networking)