3. IIRC W2k and XP has a password age of 30 days, NT4 of 15 days. The
Clients usually start to attempt to renew the password after half of the
password age, so 7,5-15 on NT and 15-30 on W2k+.
Ulf
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern
Sent: Tuesday, November 01, 2005 5:56 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] NT enumeration1.Thanks2. I know how to get pwdLastSet in AD. How do you get passwords ages in NT sams?3. If i have win2k clients, they would be setting their passwords every 30 days even in a NT domain?Thanks again.
On 11/1/05, joe <[EMAIL PROTECTED]> wrote:If you just care about real machines (i.e. no Wintendo machines - Win9x) then you enumerate the computer accounts in the domain and try to contact all of them and verify their password ages. NT machines should be changing passwords every 7 days unless that was overridden.
From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Tom Kern
Sent: Tuesday, November 01, 2005 11:10 AM
To: activedirectory
Subject: [ActiveDir] NT enumeration
What is the most accurate way to enumerate "live" machines on an NT domain?Check WINS?Net View?What is the most accurate and reliable way to list all machines in an NT domain that are active?Thanks a lot
