deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-15 06:47:21 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Update windows/security/identity-protection/hello-for-business/passwordless-strategy.md

Browse Source 
- "password-less" => 'passwordless' in line 267

Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com>
This commit is contained in:
Trond B. Krokli 2019-06-12 20:24:55 +02:00 committed by illfated
parent d911333b88
commit 93da749951
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
windows/security/identity-protection/hello-for-business/passwordless-strategy.md
View File

@ -264,7 +264,7 @@ The account options on a user account includes an option -- **Smart card is requ
![SCRIL setting on AD Users and Computers](images/passwordless/00-scril-dsa.png) ![SCRIL setting on AD Users and Computers](images/passwordless/00-scril-dsa.png)
**SCRIL setting for a user on Active Directory Users and Computers.** **SCRIL setting for a user on Active Directory Users and Computers.**
When you configure a user account for SCRIL, Active Directory changes the affected user's password to a random 128 bits of data. Additionally, domain controllers hosting the user account do not allow the user to sign-in interactively with a password. Also, users will no longer be troubled with needing to change their password when it expires, because passwords for SCRIL users in domains with a Windows Server 2012 R2 or early domain functional level do not expire. The users are effectively password-less because: When you configure a user account for SCRIL, Active Directory changes the affected user's password to a random 128 bits of data. Additionally, domain controllers hosting the user account do not allow the user to sign-in interactively with a password. Also, users will no longer be troubled with needing to change their password when it expires, because passwords for SCRIL users in domains with a Windows Server 2012 R2 or early domain functional level do not expire. The users are effectively passwordless because:
- the do not know their password. - the do not know their password.
- their password is 128 random bits of data and is likely to include non-typable characters. - their password is 128 random bits of data and is likely to include non-typable characters.
- the user is not asked to change their password - the user is not asked to change their password