How can I disable trust password changes?

John Savill

January 8, 2000

1 Min Read
ITPro Today logo in a gray background | ITPro Today

A. After a trust is established using a defined password it is changedautomatically every seven days. If this password change is missed two cyclesrunning then the trust is broken. This also applies to machines in a domain whohave a secure channel with the domain controller and change their passwordsevery 7 days on NT 4.0 and for Windows 2000 every 30 days.

To disable the trust password changes perform the following change on thedomain controllers/workstations:

  1. Start the registry editor (regedit.exe)

  2. Move to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNetlogonParameters

  3. Double click on DisablePasswordChange

  4. Set to 1

  5. Click OK

  6. Close the registry editor

Another option to stop the computer account password changes is to refuse thechange at the domain controller:

  1. Start the registry editor (regedit.exe)

  2. Move to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNetlogonParameters

  3. From the Edit menu select New - DWORD value

  4. Enter a name of RefusePasswordChange

  5. Double click on the new value and set to 1

  6. Click OK

  7. Close the registry editor

About the Author

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like