[Samba] is the domain admin password stored on the local machine?

[Derek Shaw]

Tomasz Chmielewski wrote:

> I just wanted to know if the domain admin password is stored on the
> local machine, when that machine joins the domain?
>
> Or is it just used to authenticate, and it is not stored anywhere on
> the workstation?
>
you may want to read this Microsoft document about cached domain logons
http://tinyurl.com/93w7h
or this one:
http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url=/resources/documentation/Windows/2000/server/reskit/en-us/gp/579.asp

in brief:
Set the registry value HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\CachedLogonsCount to 0.

here's why:
http://www.irongeek.com/i.php?page=security/cachecrack

--
Derek Shaw
BIS Business Information Systems Inc.
Victoria, BC.
voice: 250-885-2021   fax: 250-386-4060
GnuPG Public Key ID: 0x5553C338