machine passwords

Simo Sorce simo.sorce at xsec.it
Tue Aug 13 07:23:01 GMT 2002


Machine Passwords change once a week by default.
There are a few things you can do:
1. change the default so that passwords take more time to change
   I would not do that it lower the security of you network a lot.
2. when you do the image also save the password being used when you
   shut down the source machine and then reset to that saved password
   the machine accounts on restore. (I would go for this one, but be
   careful I had it mostly working in my test but sometimes not). 
3. rejoin at every installation (unfortunately requires root being
   present at restore time).

Simo.

On Tue, 2002-08-13 at 18:01, Bartlomiej Solarz-Niesluchowski wrote:
> Good morning!
> 
> I have in my net over 500 PC.
> 
> Currently (windows ME/98) I clone whole disks between workstations with 
> partimage (I setup special software which changes "computer name" 
> automatically based on revDNS name of computer - so clone process is whole 
> automatic).
> 
> Now I want to change client OS to XP.
> 
> Now I have questions.
> 
> When I made software on PC e.g. mother01 (with joining domain) and clone it 
> to dauther01 + change "computer Name" with regedit from mother01 to 
> dauther01 i can not log in because domain password for dauther01 is not 
> set. So I copy domain password from mother01 to dauther01 and I can log in. 
> But I do not know if those password changes in time. e.g. at 13.8 it is 
> AAAAAAAA but after e.g. 2 weeks it was changed (I read that machines 
> passwords are automatically changing in time without rejoining domain - it 
> is true?) - if somebody know when machines passwords are changing (if only 
> on joining domain - it is no problem (I can copy password from mother01 to 
> whole bunch of dauthers), but if it changes automatically I am in tuple)?
> 
> Please enlight me about machine passwords and its behaviour...
> 
> Best Regards
> 
> 
> --
> Bartlomiej Solarz-Niesluchowski, Administrator WSISiZ
> e-mail: B.Solarz-Niesluchowski at wsisiz.edu.pl
-- 
Simo Sorce - simo.sorce at xsec.it
Xsec s.r.l.
via Durando 10 Ed. G - 20158 - Milano
tel. +39 02 2399 7130 - fax: +39 02 700 442 399
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20020813/5050d3ab/attachment.bin


More information about the samba-technical mailing list