[Samba] [Resolved] Reestablishing trust with PDC

[Ivan Ordonez]

I will give this a shot.  Thanks.

On 1/11/2011 7:00 PM, Taso Hatzi wrote:
> On Wed, Jan 12, 2011 at 6:24 AM,<iordonez at berkeley.edu>  wrote:
>> I also tried this to no avail: Disabled the machine password change on all
>> win7 clients by setting
>>
>> HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
>>   DisablePasswordChange = dword:1
> If Win 7 is ignoring that setting, it might honor the one which sets the
> password change period.
>
>
>> MaximumPasswordAge determines when the computer password needs to be changed.
>>
>> Key = HKLM\SYSTEM\CurrentControlSet\Services\NetLogon\Parameters
>> Value = MaximumPasswordAge REG_DWORD
>> Default = 30
>> Range = 1 to 1,000,000 (in days)
>> Group policy setting:
>> Computer Configuration\windows Settings\Security settings\Local Policies\Security Options
>> Domain member: Maximum machine account Password age
>> To clear things up, it is 7 days on Windows NT by default, and 30 days on Windows 2000 and up.
>> The trust password follows the same setting. So Trust between two NT 4 domains is 7 days. Trusts between Windows 2000 and up and anything else is 30 days.
>>
>> So what this means is if 2000 and NT4  trust password is 30 days.
>>
>> 2000 to 2000 is 30 days.
>>
>> 2000 to 2003 is 30 days.
>>
>> 2003 to 2003 is 30 days.