(/ Microsoft MVP - Directory
Serviceswww.akomolafe.com - we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you
were worried about Yesterday?
-anon
From: joeSent: Fri 9/15/2006 7:52
AMTo: ActiveDir@mail.activedir.orgSubject: RE:
[ActiveDir] S
afe.com - we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
From: joeSent: Fri 9/15/2006 7:52 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Strange password issue
The account is currently 512... You can't get there wit
veDir@mail.activedir.orgSubject: RE: [ActiveDir] Strange password
issue
Paul, did you try
this?
Sinc
ptember 14, 2006 11:52 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Strange password
issue
I think you are missing
5.
5. The account was created programmatically
disabled with PWD_NOT_REQD set. So, we have 546 UAC. Then someone
programmatically set UAC to 544 or went int
- Directory Serviceswww.akomolafe.com - we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
From: Paul WilliamsSent: Fri 9/15/2006 12:25 AMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Strange password issue
Not really, as it'
Microsoft MVP - Directory
Serviceswww.akomolafe.com - we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you
were worried about Yesterday?
-anon
From: joeSent: Thu 9/14/2006 5:25
PMTo: ActiveDir@mail.activedir.orgSubject: RE:
[ActiveDir] Strange password
o you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
From: joeSent: Thu 9/14/2006 5:25 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Strange password issue
The secret is you cannot ENABLE an account with no password if you have a password length policy an
ailto:[EMAIL PROTECTED] On Behalf Of Paul
WilliamsSent: Wednesday, September 06, 2006 3:30 PMTo:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Strange password
issue
PWD_NOT_REQ is
32.
You can create an
account with this set and bypass the need to set a password (ADSI does this
[EMAIL PROTECTED]
To: ActiveDir@mail.activedir.org
Sent: Monday, September 11, 2006 3:02
PM
Subject: Re: [ActiveDir] Strange password
issue
My understanding was that the Password Policies
are applied similarly to any other Group Policy. I do recall doing some
testing
[EMAIL PROTECTED]] On Behalf Of Paul WilliamsSent: Thursday, September 07, 2006 7:36 AM
To: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Strange password issue
But you cannot set UAC to 512 if the password is blank, as it doesn't comply with the password policy. Try it. The other hal
html-
Original Message -
From:
Paul Williams
To: ActiveDir@mail.activedir.org
Sent: Monday, September 11, 2006 7:06
PM
Subject: Re: [ActiveDir] Strange password
issue
Have you actually seen this
behaviour? As it was my understanding that this particular polic
here:
-- http://www.msresource.net/content/view/36/46/
--Paul
- Original Message -
From:
Passo,
Larry
To: ActiveDir@mail.activedir.org
Sent: Sunday, September 10, 2006 3:19
AM
Subject: RE: [ActiveDir] Strange password
issue
If
the Domain Controllers OU
lf Of
[EMAIL PROTECTED]Sent: Friday, September 08, 2006 1:16
AMTo: ActiveDir@mail.activedir.orgSubject: RE:
[ActiveDir] Strange password issue
err, actually the password policy is stored in the
machine portion of the GPO and thus applies to all machines and therefore all
local user ob
@mail.activedir.orgSubject: RE: [ActiveDir] Strange password
issue
Impossible/irrelevant. If it's a domain account, the policy applies
regardless, because the account is stored in AD. If it's a local account, then
the policy doesn't apply regardless; domain account policies don&#x
mber 06, 2006 11:44 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Strange password issue
If you mean before the policy was set up, then, no.
This policy has been in effect for a couple of years and
the account was created a month ago..
Maybe the PC is not getting the Default Domain Policy
x27;t link it to the DC's OU- which
is where the DCs read that info. from.
--Paul
From: Laura A. Robinson [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 06, 2006 9:27 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Strange password iss
2006 11:44 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Strange password issue
If you mean before the policy was set up, then, no.
This policy has been in effect
MAIL PROTECTED]] On Behalf Of Paul WilliamsSent: Thursday, September 07, 2006 7:36 AM
To: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Strange password issue
But you cannot set UAC to 512 if the password is blank, as it doesn't comply with the password policy. Try it. The other hal
lto:
[EMAIL PROTECTED]] On Behalf Of Paul WilliamsSent: Thursday, September 07, 2006 7:36 AM
To: ActiveDir@mail.activedir.orgSubject:
Re: [ActiveDir] Strange password issue
But you cannot set UAC to 512 if the password is blank, as it doesn't comply with the password policy. Try it. The
t when the
policy wasn't in place.
--Paul
- Original Message -
From:
Laura A. Robinson
To: ActiveDir@mail.activedir.org
Sent: Thursday, September 07, 2006 4:56
PM
Subject: RE: [ActiveDir] Strange password
issue
Since the OP has said that the accounts
-mail you are talking about.
~Ben
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Laura A. Robinson
Sent: Thursday, September 07, 2006 8:56 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Strange password issue
Since the OP has said that the accounts
s,
Laura
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Paul
WilliamsSent: Thursday, September 07, 2006 7:36 AMTo:
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Strange
password issue
But you cannot set UAC to 512 if the
password is blank, as it does
Cc: ActiveDir@mail.activedir.org ;
[EMAIL PROTECTED]
Sent: Thursday, September 07, 2006 3:10
PM
Subject: Re: [ActiveDir] Strange password
issue
This brings up a very good
point, HOW is it checking the password length? As we pointed out earlier once
the hash is created there should
07/2006 07:35 AM
Please respond to
ActiveDir@mail.activedir.org
To
cc
Subject
Re: [ActiveDir] Strange password
issue
But you cannot set UAC to 512 if the password
is blank, as it doesn't comply with the password policy. Try it.
The other half of my post shows the error. I also
Yes, there is.
The password policy is checked as soon as the password entered (using
characters) is written into the directory, whether it is a new password or a
changed password.
If a password hash is written into the directory the system cannot check if the
password that generated the hash m
mail.activedir.org
Sent: Thursday, September 07, 2006 11:35
AM
Subject: RE: [ActiveDir] Strange password
issue
UAC bitmask is 32. A normal user then gets UAC = 544.
Try doing a ldap query for
(&(objectClas=user)(useraccountcontrol=544))
You could then modify the a
ired is set. Then
you can either have a blank password or comply with the password policy in
defdom GPO.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Paul
WilliamsSent: den 6 september 2006 21:35To:
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Strange password
i
policy to zero it says no password required (in the Window).
--Paul
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick
Sent: 06 September 2006 19:28
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Strange
password issue
>From what I recall,
s encountered, terminating...
The command did
not complete successfully
--Paul
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Al Mulnick
Sent: 06 September 2006 19:28
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Strange
password issue
>From what
erely, _ (, / | /) /) /) /---| (/_ __ ___// _ // _ ) / |_/(__(_) // (_(_)(/_(_(_/(__(/_(_/ /) (/ Microsoft MVP - Directory Serviceswww.akomolafe.com - we know IT-5.75, -3.23Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
From: Al MulnickSent: Wed 9/6/2006 11:28 AMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Strange password issue
PROTECTED] On Behalf Of
> [EMAIL PROTECTED]
> Sent: Wednesday, September 06, 2006 2:19 PM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] Strange password issue
>
> Tom, I believe that the passwd_notere
On Behalf Of Tom Kern
Sent: Wednesday, September 06, 2006 11:44 AMTo: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Strange password issue
If you mean before the policy was set up, then, no.
This policy has been in effect for a couple of years and the account was created a month ago..
M
a
From: [EMAIL PROTECTED] [mailto:
[EMAIL PROTECTED]] On Behalf Of Tom Kern
Sent: Wednesday, September 06, 2006 11:44 AMTo: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Strange password issue
If you mean before the policy was set up, then, no.
This policy has been in effect for
Subject
Re: [ActiveDir] Strange password
issue
09/06/2006 12:09
you were worried about Yesterday? -anon
From: Tom KernSent: Wed 9/6/2006 10:09 AMTo: ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Strange password issue
This is a domain account.
To rehash-
The Default Domain Policy is set to min password length- 6 charcters.
This was created 2 years
How
was the account created?
Thanks,
Laura
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tom
KernSent: Wednesday, September 06, 2006 1:10 PMTo:
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Strange
password issue
This is a domain account
o:
[EMAIL PROTECTED]] On Behalf Of Tom Kern
Sent: Wednesday, September 06, 2006 11:44 AMTo: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Strange password issue
If you mean before the policy was set up, then, no.
This policy has been in effect for a couple of years and the account was cr
ain account?
Laura
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tom
KernSent: Wednesday, September 06, 2006 11:44 AMTo:
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] Strange
password issue
If you mean before the policy was set up, then, no.
Thi
If you mean before the policy was set up, then, no.
This policy has been in effect for a couple of years and the account was created a month ago..
Maybe the PC is not getting the Default Domain Policy?
On 9/6/06, Williams, Robert <[EMAIL PROTECTED]> wrote:
Tom,
This is just a stab in th
The password might have been set blank
before the password policy was set.
William
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern
Sent: 06 September 2006 15:39
To: activedirectory
Subject: [ActiveDir] Strange
password issue
I'm having t
Tom,
This is just a stab in the dark but is it
possible that this user’s password was set prior to the Default Domain
Policy being in effect?
Robert Williams
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern
Sent: Wednesday, September 06,
2006 9:39 AM
41 matches
Mail list logo
