.png?width=100&auto=webp&quality=80&disable=upscale "Picture of John Savill")
.png?width=400&auto=webp&quality=80&disable=upscale "John Savill")
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
How can I disable trust password changes?
John Savill
January 8, 2000
1 Min Read
A. After a trust is established using a defined password it is changedautomatically every seven days. If this password change is missed two cyclesrunning then the trust is broken. This also applies to machines in a domain whohave a secure channel with the domain controller and change their passwordsevery 7 days on NT 4.0 and for Windows 2000 every 30 days.
To disable the trust password changes perform the following change on thedomain controllers/workstations:
Start the registry editor (regedit.exe)
Move to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNetlogonParameters
Double click on DisablePasswordChange
Set to 1
Click OK
Close the registry editor
Another option to stop the computer account password changes is to refuse thechange at the domain controller:
Start the registry editor (regedit.exe)
Move to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNetlogonParameters
From the Edit menu select New - DWORD value
Enter a name of RefusePasswordChange
Double click on the new value and set to 1
Click OK
Close the registry editor
About the Author
You May Also Like
.jpg?width=700&auto=webp&quality=80&disable=upscale)
