| Title: | Windows NT |
| Notice: | See note 15.0 for HCL location |
| Moderator: | TARKIN::LIN .com::FOLEY |
| Created: | Thu Oct 31 1991 |
| Last Modified: | Fri Jun 06 1997 |
| Last Successful Update: | Fri Jun 06 1997 |
| Number of topics: | 6086 |
| Total number of notes: | 31449 |
A customer is planning to migrate a big WfW / PATHWORKS environment into a Windows NT environment. In a first step, they will have several hundred PCs running NT workstation. They are looking for a way to centrally 'distribute' password changes for the Administrator accounts in the *local* accounts database of each workstation. Is there a tool to do this ? Their security policy requires regular password changes on privileged accounts, and they don't sympathize with the idea of visiting hundreds of offices to change passwords on each PC. Thanks for your suggestions, Hans.
| T.R | Title | User | Personal Name | Date | Lines |
|---|---|---|---|---|---|
| 5786.1 | TARKIN::LIN | Bill Lin | Sat Mar 08 1997 15:47 | 15 | |
re: LNZALI::BACHNER
Hi Hans,
If they *MUST* have expiring passwords for the local administrator
accounts, I think they should just go ahead and let the passwords
expire. As long as they have domain admin accounts configured as
members of the local administrator group, they'll be able to get in
using the domain admin accounts. These accounts would of course be
manageable on the domain controller (with an appropriate BDC) and can
be set to expire on their required schedule.
$.02,
/Bill
| |||||