Re: Changing Password

From: Tim Sanderson (trsandersonii_at_hotmail.com)
Date: 02/04/04 

Date: Tue, 3 Feb 2004 18:34:04 -0500

Use a third party product to sync the passwords when it is changed.

better yet, don't use the local administrator account to start services in a
domain environment. Create an permission/privelage equivalent user account
in the domain and change the service used credentials to match the domain
account created. Changing the account password then is easy and can affect
all services using the domain account.

Relevant Pages

  • Re: Account lockouts
    ... for reusable passwords and the AAA infrastructures that rely upon them? ... In that context, account lockout policy -- duration, threshold, lockout ... > cracking attacks. ...
    (microsoft.public.security)
  • Re: Deleting Admin Account
    ... administrative level account to change the Type of the Admin account ... created to a limited account (or create yourself a third account - non-admin ... The built-in administrator cannot be changed from the administrative level, ... You should password protect (with different passwords would be best) each ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Blank Passwords, Complex Requeirements and Problems...
    ... The account would then have: 544 = normal account with "Password Not Required" bit = on ... wellKnownObjects: B:32:6227F0AF1FC2410D8E3BB10615BB5B0F:CN=NTDS ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... As far as i know, the Win2003 AD never had a "free" Default Domain Policy to allow that, the DDP is the Default since the initial build of th AD. Ok, let's say that an Admin disabled temporarily th DDP for a few moments and allowed certain accouns to be created with blank passwords. ...
    (microsoft.public.win2000.active_directory)
  • Re: Openldap to AD
    ... How are the passwords stored in your OL implementation? ... I'm thinking that it may be easier to at least one-way sync from OL to AD. ... the account in both places and change passwords in both places. ... is for when I create a new account on openldap to be push to AD, ...
    (microsoft.public.windows.server.active_directory)
  • RE: Single sign on
    ... How to authentificate an user via telephon? ... > Avatier has a product which would allow users to reset their own passwords ... >> for the person whose account is reset. ... >> would only be accessible by the person whose account is reset. ...
    (Security-Basics)