Merge pull request #3787 from MaratMussabekov/patch-29

update store-passwords-using-reversible-encryption.md
This commit is contained in:
Justin Hall 2019-05-24 09:38:02 -07:00 committed by GitHub
commit d8d7d000d7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -69,6 +69,9 @@ Enabling this policy setting allows the operating system to store passwords in a
Disable the **Store password using reversible encryption** policy setting.
>[!Note]
> When policy settings are disabled, only new passwords will be stored using one-way encryption by default. Existing passwords will be stored using reversible encryption until they are changed.
### Potential impact
If your organization uses CHAP through remote access or IAS, or Digest Authentication in IIS, you must configure this policy setting to Enabled. This presents a security risk when you apply the setting through Group Policy on a user-by-user basis because it requires the appropriate user account object to be opened in Active Directory Users and Computers.