deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-29 05:37:22 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Merge pull request #5460 from MicrosoftDocs/master

Browse Source 
Publish 08/02/2021, 10:30 AM
This commit is contained in:
Diana Hanson 2021-08-02 11:45:22 -06:00 committed by GitHub
commit ad0a3e663c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 17 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
windows/security/threat-protection/security-policy-settings/domain-controller-refuse-machine-account-password-changes.md
View File

@ -14,7 +14,6 @@ manager: dansimp
audience: ITPro
ms.collection: M365-security-compliance
ms.topic: conceptual
ms.date: 04/19/2017
ms.technology: mde
---
@ -31,17 +30,11 @@ This policy setting enables or disables blocking a domain controller from accept
### Possible values
- Enabled
- **Enabled** When enabled, this setting does not allow a domain controller to accept any changes to a machine account's password.
When enabled, this setting does not allow a domain controller to accept any changes to a machine account's password.
- **Disabled** When disabled, this setting allows a domain controller to accept any changes to a machine account's password.
- Disabled
When disabled, this setting allows a domain controller to accept any changes to a machine account's password.
- Not defined
Same as Disabled.
- **Not defined** Same as Disabled.
### Best practices
@ -51,12 +44,19 @@ This policy setting enables or disables blocking a domain controller from accept
Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Security Options
The policy referenced configures the following registry value:
Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \System\CurrentControlSet\Services\Netlogon\Parameters\
Value Name: RefusePasswordChange
### Default values
The following table lists the actual and effective default values for this policy. Default values are also listed on the policy’s property page.
| Server type or GPO | Default value |
| - | - |
|---|---|
| Default Domain Policy | Not defined |
| Default Domain Controller Policy | Not defined |
| Stand-Alone Server Default Settings | Not defined |