Tomasz Chmielewski wrote: > I just wanted to know if the domain admin password is stored on the > local machine, when that machine joins the domain? > > Or is it just used to authenticate, and it is not stored anywhere on > the workstation? > you may want to read this Microsoft document about cached domain logons http://tinyurl.com/93w7h or this one: http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url=/resources/documentation/Windows/2000/server/reskit/en-us/gp/579.asp
in brief: Set the registry value HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\CachedLogonsCount to 0. here's why: http://www.irongeek.com/i.php?page=security/cachecrack -- Derek Shaw BIS Business Information Systems Inc. Victoria, BC. voice: 250-885-2021 fax: 250-386-4060 GnuPG Public Key ID: 0x5553C338 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
