Merge pull request #3787 from MaratMussabekov/patch-29

update store-passwords-using-reversible-encryption.md
This commit is contained in:
Justin Hall 2019-05-24 09:38:02 -07:00 committed by GitHub
commit d8d7d000d7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -69,6 +69,9 @@ Enabling this policy setting allows the operating system to store passwords in a
Disable the **Store password using reversible encryption** policy setting. Disable the **Store password using reversible encryption** policy setting.
>[!Note]
> When policy settings are disabled, only new passwords will be stored using one-way encryption by default. Existing passwords will be stored using reversible encryption until they are changed.
### Potential impact ### Potential impact
If your organization uses CHAP through remote access or IAS, or Digest Authentication in IIS, you must configure this policy setting to Enabled. This presents a security risk when you apply the setting through Group Policy on a user-by-user basis because it requires the appropriate user account object to be opened in Active Directory Users and Computers. If your organization uses CHAP through remote access or IAS, or Digest Authentication in IIS, you must configure this policy setting to Enabled. This presents a security risk when you apply the setting through Group Policy on a user-by-user basis because it requires the appropriate user account object to be opened in Active Directory Users and Computers.