[Samba] [Resolved] Reestablishing trust with PDC
taso.hatzi at gmail.com
Tue Jan 11 20:00:57 MST 2011
On Wed, Jan 12, 2011 at 6:24 AM, <iordonez at berkeley.edu> wrote:
> I also tried this to no avail: Disabled the machine password change on all
> win7 clients by setting
> DisablePasswordChange = dword:1
If Win 7 is ignoring that setting, it might honor the one which sets the
password change period.
> MaximumPasswordAge determines when the computer password needs to be changed.
> Key = HKLM\SYSTEM\CurrentControlSet\Services\NetLogon\Parameters
> Value = MaximumPasswordAge REG_DWORD
> Default = 30
> Range = 1 to 1,000,000 (in days)
> Group policy setting:
> Computer Configuration\windows Settings\Security settings\Local Policies\Security Options
> Domain member: Maximum machine account Password age
> To clear things up, it is 7 days on Windows NT by default, and 30 days on Windows 2000 and up.
> The trust password follows the same setting. So Trust between two NT 4 domains is 7 days. Trusts between Windows 2000 and up and anything else is 30 days.
> So what this means is if 2000 and NT4 trust password is 30 days.
> 2000 to 2000 is 30 days.
> 2000 to 2003 is 30 days.
> 2003 to 2003 is 30 days.
More information about the samba