Re: No LM Hash - no really

From: Ian Boyd (admin_at_SWIFTPA.NET)
Date: 08/22/04 

Date: Sun, 22 Aug 2004 13:43:00 -0400

> i have set the group policy on the domain controller (Windows 2000), and
> added to the domain controller's registry the NoLMHash = 1 DWORD.
>
> So how does one REALLY disable LM Hashes in an Active Directory
environment?

The answer is, neither of the above work.

Create a NoLMHash key, not a NoLMHash=1 DWORD

That's 7 hours of my life i'm not getting back.

Relevant Pages

  • Re: Auto-Enrollment of Certificates
    ... What I understood from your reply is that I need to have an Active Directory ... hiearchy then you would need to work with Verisign and deploy a Windows ... Server 2003 subordinate CA in your environment." ... certificates provides a quick and simple way to issue certificates to users ...
    (microsoft.public.platformsdk.security)
  • Re: Looking for a step by step guide on setting up AD
    ... your own environment and needs. ... and the corresponding Step-by-Step Guides. ... I actually like the Windows Server 2003 DELTA guide -- ... a Domain Controller and Active Directory on Windows Server 2003? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Edit MS Active Directory
    ... that have an understanding and a large environment. ... Author of O'Reilly Active Directory Third Edition ... permissions on office network and want to remove the admin permissions ... What I need to do is to allow Helpdesk Team ability to logon and have ...
    (microsoft.public.windows.server.active_directory)
  • Re: Looking for a step by step guide on setting up AD
    ... your own environment and needs. ... and the corresponding Step-by-Step Guides. ... book on Active Directory". ... AD, but learning that little bit really correctly and well, is in most ...
    (microsoft.public.windows.server.active_directory)
  • Re: Adding AD role to a windows 2003 std. R2 member server
    ... I assume that you can do this in an SBS2003 environment but to be ... The Active Directory Installation Wizard cannot continue because the ... command-line tool to prepare both the forest and the domain. ...
    (microsoft.public.windows.server.active_directory)