We need to sync the machine password for authentication purpose because the DR machine is not a part of production AD domain. We have to sync the password so that Kerberos authentication work properly (Kerberos is not working when the password do not match). So whenever there is a password changes on Production exchange we sync it immediately.

 

We do not sync the machine SID.

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Deji Akomolafe
Sent: Wednesday, August 16, 2006 8:48 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Windows 2003 R2 Issue

 

I do not have a solution for your issues. I am just curious. Why do you NEED the password? Why is it important for you to set the same password on your DR box?

 

So, the real exchange server dies, you bring in your DR box and have it impersonate the real one? Is this why? Is this to eliminate the need to have to manually join your box to the domain? Do you also clone the machine SID?

 

Again, just curious.


Sincerely,
   _____                               
  (, /  |  /)               /)     /)  
    /---| (/_  ______   ___// _   //  _
 ) /    |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/                             /)     
                               (/      
Microsoft MVP - Directory Services
www.akomolafe.com - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon

 


From: Manjeet Singh
Sent: Wed 8/16/2006 1:26 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Windows 2003 R2 Issue

I am trying to read the machine password from exchange server (Windows 2003 R2 Standard + SP1, Exchange 2003 +SP2). I have tried some other tools also (like lsadump) but they all are failing to read it.

We are working on Exchange DR solution- so we need to import the machine password from production exchange server and we set the same password on our DR box.

 

 

The same function is working on windows 2000 and windows 2003 in same domain. But its failing on Windows 2003 R2.

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Sunday, August 13, 2006 1:42 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Windows 2003 R2 Issue

 

I have two questions.

 

1. Where are you reading the password from?

 

2. Why?

 

--

O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm 

 

 

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Manjeet Singh
Sent: Friday, August 11, 2006 7:52 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Windows 2003 R2 Issue

Hi,

 

I have one test setup with Windows 2003 R2 with SP1.

Single Domain Topology:

 

AD Server = Windows 2003 R2 + SP1

Exchange Server: - Windows 2003 R2 + Exchange 2003 Ent + SP2 + latest Microsoft security patches.

 

Problem: I am unable to read the machine password of the Exchange Server. It says Error if I try to access the machine password. I need the machine password of exchange server for testing some code. Any idea what could be the reason?

 

I am able to get the password successfully from another exchange server which is running in Windows 2003 OS.

Reply via email to