Disable Computer Domain Account Password Synchronistation

VMware allows you to roll back a guest OS to previous snapshots. Rolling back to snapshots can result in the guest OS not being able to authenticate to the Active Directory domain. This is because, by default, every 30 days, the computer will negotiate a new password with its Active Directory computer account object.

Microsoft Knowledge Base article KB175468 lists someworkarounds to this situation. Method 1, the registry change option, is known to work. Method 3, using Local Group Policy, is being investigated.

Method 1 entails setting the following registry key;

HKLM\SYSTEM\CurrentControlSet\Services\NetLogon\Parameters
  DisablePasswordChange REG_DWORD 1
Advertisements

Posted on 09/04/2009, in VMWare, Windows. Bookmark the permalink. Leave a comment.

Comments are closed.

%d bloggers like this: