I have seen this with many different OSes or applications (Samba and other
CIFS implementations) that do things to pretend to be Windows machines.
Generally there is some configuration change you have to make in the config
to force them to change their password on some frequency. This isn't
enforced from the domain side unfortunately.

This is really common for instance with various Unix/BSD/Linux based filers.

   joe


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M.
Sent: Thursday, July 21, 2005 12:15 PM
To: [email protected]
Subject: [ActiveDir] OT: Macintoshes in AD not updating account password

We have been joining MacIntosh computers running the Tiger OS to Active
Directory.  One problem that I see is that these computers generate a
Security Log Eventid 675 Account Authentication failure record on the domain
controllers.  Some research shows that the "pwdLastSet" attribute value for
the computer account is the date they were first joined to AD.
They don't seem to be renewing their computer account password at either the
7 day (NT) or 30 day (W2K, WXP) timeframes like out Windows OS workstations
do.

Has anyone else experienced this behavior?  Bug?  Workaround?  Thoughts
(besides get rid of the Macs, LOL!)?  Thanks!

Mike Thommes
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to