Domain controller: Refuse machine account password changes
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options
Description
Determines whether or not a Domain Controller will accept password change requests for computer accounts. If enabled on all Domain Controllers in a domain, then domain members will not be able to change their machine account passwords leaving those passwords susceptible to attack.
Default: Disabled.
For more information, see:
| • |
