Re: Users w\expired passwords(non-blank) + PASSWD_NOTREQD = Access ???

Tech-Archive recommends: Fix windows errors by optimizing your registry

That's why I suggested testing it.

If I were to think the question through for a second, then the answer is YES
I am getting through if the password is set to password not required + it is
expired. Why? Because I don't have to enter a password to change it. No
password requirement == already blank in many cases. At the very least, you
can't say it's not.


I have to agree with the auditors on this one that you shouldn't have those
lying around.

YMMV, but I still suggest testing for your specific environment.

Hopefully you haven't told the auditor's they're full of it yet :)


"Joe_SMS" <jw_nagy@xxxxxxxxxxx> wrote in message
news:1176726200.305894.126820@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I think Al, the other contributor is thinking the same way people here
are. But thats a misinterpretation. Its not that a password isn't
required to LOGIN, its simply like Joe said, the account isn't
required to have a password. But, whether you have a blank password
or not..... IF ITS EXPIRED, you're not getting in.

This is what I was thinking and I think Joe pretty much confirmed it.



.

Relevant Pages

  • Re: Question about login script
    ... "Joe" wrote: ... > Is something wrong with my SQL statement? ... >>> I have a login page. ... he needs to activate his account. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: User Account - Cannot Access
    ... You can just copy the profile from one to the other. ... Joe wrote: ... Why would her login be corrupted, if she has the former profile moved ... Flip her account to power user. ...
    (microsoft.public.windows.server.sbs)
  • Re: Win XP PRO User Accounts????
    ... I have a second account of her name. ... "Joe" wrote in message ... > name when there are two users with the same login on the same machine. ... > Either because it exists on the domain or just on the local machine. ...
    (microsoft.public.windowsxp.help_and_support)