Re: LM password hashes - still being used?

• Previous message: TQuinn: "Re: Windows 2003 server password questions."
• In reply to: Craig Williams: "LM password hashes - still being used?"
• Next in thread: Tim Net: "Re: LM password hashes - still being used?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Mon, 05 Jul 2004 13:30:33 GMT

"Craig Williams" <sleet71-jan4@yahoo.com> wrote in message
news:e1lsUy3XEHA.2824@TK2MSFTNGP10.phx.gbl...
> I would like to disable LM password hash creation/storage in our Windows
> 2003 domain.
> The challenge is that we have a fairly large domain, and while standards
are
> that all desktops should be at least NT4, I am not completely sure that
> *ALL* 9x clients are gone. Is there a way to tell if clients that are
being
> authenticated by using the LM password hash before I disable LM hash
> creation. Maybe a particular event for their auth in the security log, or
> some other tool like the netlogon debug log?

In addition to Joe's comments - one other thing to consider is whether Win9x
laptops ever connect to the network.

If it's a fairly large domain - as you say - and *if* you have mobile users,
then you might have to monitor the connection types for longer than you
anticipated.

-- 
Hairy One Kenobi
Disclaimer: the opinions expressed in this opinion do not necessarily
reflect the opinions of the highly-opinionated person expressing the opinion
in the first place. So there!

• Previous message: TQuinn: "Re: Windows 2003 server password questions."
• In reply to: Craig Williams: "LM password hashes - still being used?"
• Next in thread: Tim Net: "Re: LM password hashes - still being used?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]