deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-29 05:37:22 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Merge pull request #5460 from MicrosoftDocs/master

Browse Source 
Publish 08/02/2021, 10:30 AM
This commit is contained in:
Diana Hanson 2021-08-02 11:45:22 -06:00 committed by GitHub
commit ad0a3e663c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 17 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
windows/security/threat-protection/security-policy-settings/domain-controller-refuse-machine-account-password-changes.md
View File

@ -14,7 +14,6 @@ manager: dansimp
audience: ITPro audience: ITPro
ms.collection: M365-security-compliance ms.collection: M365-security-compliance
ms.topic: conceptual ms.topic: conceptual
ms.date: 04/19/2017
ms.technology: mde ms.technology: mde
--- ---
@ -31,17 +30,11 @@ This policy setting enables or disables blocking a domain controller from accept
### Possible values ### Possible values
- Enabled - **Enabled** When enabled, this setting does not allow a domain controller to accept any changes to a machine account's password.
When enabled, this setting does not allow a domain controller to accept any changes to a machine account's password. - **Disabled** When disabled, this setting allows a domain controller to accept any changes to a machine account's password.
- Disabled - **Not defined** Same as Disabled.
When disabled, this setting allows a domain controller to accept any changes to a machine account's password.
- Not defined
Same as Disabled.
### Best practices ### Best practices
@ -51,18 +44,25 @@ This policy setting enables or disables blocking a domain controller from accept
Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options
The policy referenced configures the following registry value:
Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \System\CurrentControlSet\Services\Netlogon\Parameters\
Value Name: RefusePasswordChange
### Default values ### Default values
The following table lists the actual and effective default values for this policy. Default values are also listed on the policy’s property page. The following table lists the actual and effective default values for this policy. Default values are also listed on the policy’s property page.
| Server type or GPO | Default value | | Server type or GPO | Default value |
| - | - | |---|---|
| Default Domain Policy | Not defined| | Default Domain Policy | Not defined |
| Default Domain Controller Policy | Not defined| | Default Domain Controller Policy | Not defined |
| Stand-Alone Server Default Settings | Not defined| | Stand-Alone Server Default Settings | Not defined |
| DC Effective Default Settings | Disabled| | DC Effective Default Settings | Disabled |
| Member Server Effective Default Settings | Disabled| | Member Server Effective Default Settings | Disabled |
| Client Computer Effective Default Settings | Not applicable| | Client Computer Effective Default Settings | Not applicable |
## Policy management ## Policy management