[Samba] [Resolved] Reestablishing trust with PDC

[Taso Hatzi]

On Wed, Jan 12, 2011 at 6:24 AM,  <iordonez at berkeley.edu> wrote:
>
> I also tried this to no avail: Disabled the machine password change on all
> win7 clients by setting
>
> HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
>  DisablePasswordChange = dword:1

If Win 7 is ignoring that setting, it might honor the one which sets the
password change period.


> MaximumPasswordAge determines when the computer password needs to be changed.
>
> Key = HKLM\SYSTEM\CurrentControlSet\Services\NetLogon\Parameters
> Value = MaximumPasswordAge REG_DWORD
> Default = 30
> Range = 1 to 1,000,000 (in days)
> Group policy setting:
> Computer Configuration\windows Settings\Security settings\Local Policies\Security Options
> Domain member: Maximum machine account Password age
> To clear things up, it is 7 days on Windows NT by default, and 30 days on Windows 2000 and up.
> The trust password follows the same setting. So Trust between two NT 4 domains is 7 days. Trusts between Windows 2000 and up and anything else is 30 days.
>
> So what this means is if 2000 and NT4  trust password is 30 days.
>
> 2000 to 2000 is 30 days.
>
> 2000 to 2003 is 30 days.
>
> 2003 to 2003 is 30 days.