Interesting Issue with Major Implications


Hi ,

I had an interesting issue with a customer recently.

After a recent promotion of a couple of Domain Controllers , it came to light some time later that users were able to set their passwords to 0 e.g. minimum password length = 0.

On investigation what was discovered was the following.

When the Domain controller was promoted a secedit script was run. This had been part of a server build process for sometime. It was normally run on completion of the normal member server build was run.

What was included in the secedit.db script was the following critical entries to our discussion;

[Unicode]
Unicode=yes
[System Access]
MinimumPasswordAge = 0
MaximumPasswordAge = 42
MinimumPasswordLength = 0
PasswordComplexity = 0
PasswordHistorySize = 0
LockoutBadCount = 0
RequireLogonToChangePassword = 0
ForceLogoffWhenHourExpire = 0

Secedit configuration that was run

copy x:\abc\xxx\secedit.db c:\secedit.sdb /y

secedit /configure /db c:\secedit.sdb /cfg x:\abc\xxx\xxxabc.inf /overwrite /log x:\abc\xxx\error.log /quiet

attrib +h c:\secedit.sdb

This script was run using Domain Admins credentials

The result of running this command After the Domain Controller was promoted was the following Behaviour;

The Default Domain Account Security settings were overwritten by the “new” Secedit.sdb settings above. This overwrote the settings that are getting applied via the Account Security section in the Default Domain Policy.

Note this is expected behaviour because of the way Domain Controller reads its Security settings.

Information below taken from a Gary Olsen blog of 2005.

“Domain controllers provide security settings to domain users at logon time. This is a critical (and confusing) concept. The user’s machine doesn’t pull the security settings from the GPO at startup as it does for other machine settings. The client gets the security settings when the user is validated. The security settings that domain controllers apply to clients upon a successful user logon are those that are stored in the DC’s local secedit.sdb security database. The DC gets the Account Security settings from the domain policy and applies them to its local .sdb. Note that this applies only to the account security settings, not to any other policy setting. DCs then replicate their local .sdb with each other.”

Note: If you modify block the Default Domain Policy applying to the Domain Controllers it is likely to exhibit this behaviour. Especially if the blocking or modification of the secedit.sdb is leaving the Domain Controller with insecure settings.

Therefore DO NOT run any modification to the secedit.sdb on a Domain Controller. Also do not block the application of the Default Domain  Policy to the Domain Controllers OU. Please see previous blog links for further information.

It can potentially have serious implications.

http://blogs.technet.com/janelewis/archive/2007/04/24/just-don-t-do-it.aspx 

Other useful links

http://technet.microsoft.com/ja-jp/library/cc730910(WS.10).aspx

http://support.microsoft.com/kb/313222

http://support.microsoft.com/kb/278316

Comments (75)

  1. rosenthal says:

    I am always searching online for articles that can help me. There is obviously a lot to know about this. I think you made some good points in Features also. Keep working, great job!
    venus factor reviews uk

  2. uali20 says:

    Your article is extremely fascinating and amusing. From your article.
    http://www.tattooinkstore.com">tattoo ink

  3. buy facebook likes says:

    The post is written in very a good manner and it entails many useful information for me. I am happy to find your distinguished way of writing the post.
    https://buyfakelikes.com/product/facebook-likes/

  4. Repair a Varnished Wooden Floor says:

    This is a really informative knowledge, Thanks for posting this informative Information.

    http://www.wood-finishes-direct.com/blog/wood-flooring-varnish-repair/

  5. christmas gifts for her says:

    I really enjoyed the quality information you offer to your visitors for this blog. I will bookmark your blog and have my friends check up here often.

    http://happychristmasandnewyear.com/best-christmas-gift-ideas-for-women/

  6. premium electronic cigarettes says:

    It’s very informative and you are obviously very knowledgeable in this area. You have opened my eyes to varying views on this topic with interesting and solid content.
    http://www.livcigs.com

  7. http://ledconceptslighting.genuineauditing.org says:

    No more fear or worry involved as it certainly exhaust your love and energy in this unpredictable market. For more info, click here my website
    http://ledconceptslighting.genuineauditing.org

  8. FREE chicken coop plans says:

    Wonderful illustrated information. I thank you about that. No doubt it will be very useful for my future projects. Would like to see some other posts on the same subject!
    http://chickencoopplansmanual.com/

  9. this link says:

    you’ve hit the nail on the head. Your blog is important; the issue is something that not enough people are talking intelligently about.
    http://massagesanfrancisco.net

  10. look at this site says:

    I’ll finally digg it further personally suggest to my buddys. I am steady they endow be benefited from this position.
    http://predictablepipeline.co.uk/cantgetenoughb2bleads/

  11. how to invest in gold and silver says:

    Your articles help us realize that our problems are typical, and we can solve them in constructive ways.Thank you and keep these good articles coming !
    http://gold-and-silver-buyers.com

  12. my link says:

    I believe your blog is great because you are always uploading new information that is really informative as well as assists your readers.
    http://www.bioethanolfireplace.net

  13. Autolackierung Hagen says:

    Excellent read, Positive site, where did u come up with the information on this posting?I have read a few of the articles on your website now, and I really like your style. Thanks a million and please keep up the effective work.
    http://autolackierung.in/

  14. moving helpers says:

    Fantastic work. This post possesses a real spirit of knowledge. The knowledge here seems unique and I have never known this kind of information in my entire life. This is a very rare post. You should definitely get an award for this.
    http://www.floorsandchores.net/moving-helpers.html

  15. follow fy says:

    We definitely taking pleasure in every single bit of this. It is just a great internet site and good write about. I wish to appreciate it. Great task! You guys perform a great blog, and have some great articles
    http://followfy.com

  16. dripfollowers says:

    Without a strong backing, you don’t stand much of a chance, so why not buy Instagram followers and seriously boost your online presence.
    http://dripfollowers.com

  17. bubblegum casting says:

    Please accept our thanks and congratulations on the success of your recent series on young scholars in our community. upbeat report on the good things that are happening

    https://www.change.org/p/stephen-brook-5-essential-modeling-must-haves

  18. bubblegum casting says:

    I will share it with my social networks because i enjoy posting that informatione.

    http://caps.fool.com/Blogs/which-modeling-path-is-right/1022182">bubblegum casting

  19. jAMS says:

    Im no expert, but I believe you just made an excellent point. You certainly fully understand what youre speaking about, and I can truly get behind that.

    blog comments

  20. a says:

    Hey what a brilliant post I have come across and believe me I have been searching out for this similar kind of post for past a week and hardly came across this. Thank you very much and will look for more postings from you.
    rebelmouse

  21. blog comment service says:

    I am really happy with your stuff provide. I like to bookmark it and i hope in future you w ill keep update us

    https://www.fiverr.com/seo_builder1/do-submission-of-exclusive-sixty-five-comments?funnel=201501212122015134444960">blog comment service

  22. Calculatoare Second Hand says:

    I enjoyed reading your post and found it to be informative and to the topic. Thank you for not rambling on and on just to fill the page. Thanks..
    https://www.it-sh.ro

  23. Home Automation Jupiter Island says:

    Excellent read, Positive site, where did u come up with the information on this posting?I have read a few of the articles on your website now, and I really like your style. Thanks a million and please keep up the effective work.

    http://seagullelectronics.com/">Home Automation Jupiter Island

  24. jAMS says:

    I really like your take on the issue. I now have a clear idea on what this matter is all about..
    [url= https://uk.fiverr.com/jazbee]backlinks[/url]
    https://uk.fiverr.com/jazbee">backlinks

  25. gfgf says:

    I recently came across your blog and have been reading along. I thought I would leave my first comment. I don’t know what to say except that I have enjoyed reading. Nice blog, I will keep visiting this blog very often.

    https://uk.fiverr.com/jazbee">backlinks

  26. girlsdoporn says:

    The post am professionally written AS WELL AS we feel just like the author has extensive knowledge inside this subject. Nice post.

    http://sextoyanonymous.com/">girlsdoporn

  27. girlsdoporn says:

    First people managed to get the blog .I can be interested within more similar topics. my partner and i see people managed to get this year very handy topics , my spouse and i is actually always checking your current blog thanks.

    http://sextoyanonymous.com/">girlsdoporn

  28. Top mac and pc data says:

    We will also explore a variety of sexual acts, tips, tricks and toys. Please feel free to drop
    us a message with an interesting or exciting experiences you wish to share.
    http://www.ballardcomputer.com/remote-computer-repair-service

  29. girlsdoporn says:

    Thanks for sharing so significative article with us. Wonder Know is a comprehensive website that provides all kinds of articles.

    http://pornwikileaks.org/miss-teen-colorado-runner-up-exposed/">girlsdoporn

  30. Robot says:

    If you are looking for a heating and air conditioning company in the Tulsa County area, Our professional technicians can help you select, install, and maintain equipment to assure efficiency, reliability, and comfort over the lifetime of your products
    modelle

  31. agesonghv.com says:

    Wow! I am glad after reading that post. I am always searching online for articles that can help me. There is obviously a lot to know about this. I think you made some good points in Features also.thanks a lot
    agesonghv.com

  32. haine copii ieftine says:

    Awesome and interesting article. Great things you’ve always shared with us. Thanks. Just continue composing this kind of post.
    http://www.bebenou.ro/

  33. Site says:

    Hey I am from USA for the first time he . I came across this board and I in finding It truly useful & it helped me out much. Thank You
    http://supermarijoigre.com

  34. Kits says:

    Thanks for the nice blog. It was very useful for me. Keep sharing such ideas in the future as well.
    Kits

  35. operatives says:

    I am always searching online for articles that can help me. There is obviously a lot to know about this. I think you made some good points in Features also reverse phone number search
    operatives

  36. world says:

    I am always searching online for articles that can help me. There is obviously a lot to know about this. I think you made some good points in Features also. Keep working, great job!
    world

  37. organic says:

    I beloved as much as you will obtain performed proper here. The caricature is attractive, your authored subject matter stylish. however, you command get bought an edginess over that you want be handing over the following
    organic

  38. aaa says:

    I beloved as much as you will obtain performed proper here. The caricature is attractive, your authored subject matter stylish. however, you command get bought an edginess over that you want be handing over the following
    http://organicdesignoperatives.com/">organic

  39. Robot says:

    This is such a great resource that you are providing and you give it away for free. I love seeing websites that understand the value of providing a quality resource for free. It is the old what goes around comes around routine.
    https://www.rebelmouse.com/hsveraserreviews/

  40. http://www.youtube.com/watch?v=UBtVdeNlLmw says:

    I remember the Star report that gave the full Monica Lewinsky story used POTUS often as a way
    http://www.youtube.com/watch?v=UBtVdeNlLmw">http://www.youtube.com/watch?v=UBtVdeNlLmw

  41. Robot says:

    You’ve got some interesting points in this article. I would have never considered any of these if I didn’t come across this. Thanks!.
    Benidorm Trip Advisors

  42. video says:

    However, this scene changed when more programmers became aware of virus
    programming and started building viruses that manipulated and destroyed data on infected computers.
    http://www.youtube.com/watch?v=PR30iI9KFXE">Video

  43. laveen homes for sale says:

    I am very thankful to you that you uploaded this today. I was in dire need to get some information on this topic and you’ve given me that
    http://sellingmesaarizonahomes.com/laveen-homes-sale/">laveen homes for sale

  44. Piedmont Area Rocketry says:

    I must say, as a whole lot as I enjoyed reading what you had to say, I couldnt assist but shed track of time soon after a while.
    Piedmont Area Rocketry

  45. Advanted says:

    This topic has always been one of my favorite subjects to read about. I have found your post to be very rousing and full of good information. I will check your other articles shortly.
    Advanted

  46. Advanted says:

    This topic has always been one of my favorite subjects to read about. I have found your post to be very rousing and full of good information. I will check your other articles shortly.
    Advanted

  47. cursos sepe says:

    The deegant Pandora clips are fascinating for the Fashion lady .You can find the particular Pandora clips all over the world. Choose the Pandora clips,choose the fashion.Welcome you to our pandoraok.com.We hope you can find your best love. – See more at:

    http://independent.co.ug/column/comment/4995-an-alternative-policy-response-to-ugandas-economic-challenges-#sthash.bgmZMhSp.dpuf
    http://cursosinem.info/cursos-inem-cordoba.html">cursos sepe

  48. inem .es says:

    This is such a great resource that you are providing and you give it away for free. I love seeing websites that understand the value of providing a quality resource for free. It is the old what goes around comes around routine.
    http://cursosinem.info/cursos-inem-caceres.html">inem .es

  49. Youth says:

    Your article tells me you must have a lot of background in this topic. Can you direct me to other articles about this? I will recommend this article to my friends as well. Thanks
    Youth

  50. cursos gratis online says:

    This topic has always been one of my favorite subjects to read about. I have found your post to be very rousing and full of good information. I will check your other articles shortly.
    http://cursosinem.info/cursos-inem-burgos.html">cursos gratis online

  51. bola tangkas online says:

    Existing without the answers to the difficulties you’ve sorted out through this guide is a critical case, as well as the kind which could have badly affected my entire career if I had not discovered your web site.
    bola tangkas online

  52. Harley Ascona says:

    I’m excited to uncover this page. I need to to thank you for ones time for this particularly fantastic read !!
    http://gattoascona.club/index.php/en/osteria-del-gatto-3">Harley Ascona

  53. acheter sibutramine says:

    Really appreciate this wonderful post that you have provided for us.Great site and a great topic as well i really get amazed to read this.
    http://www.sibutril.ws/fr/">acheter sibutramine

  54. buy sibutril uk says:

    I just thought it may be an idea to post incase anyone else was having problems researching but I am a little unsure if I am allowed to put names and addresses on here
    http://www.sibutril.ws/gb/home/15-sibutril-15mg-x-60-caps-sibutramine-hcl-.html">buy sibutril uk

  55. girlsdoporn says:

    Im no expert, but I believe you just made an excellent point. You certainly fully understand what youre speaking about, and I can truly get behind that.

    https://twitter.com/girlsdoporn">girlsdoporn

  56. girlsdoporn says:

    Im no expert, but I believe you just made an excellent point. You certainly fully understand what youre speaking about, and I can truly get behind that.

    https://twitter.com/girlsdoporn">girlsdoporn

  57. CSNK says:

    Excellent read, Positive site, where did u come up with the information on this posting?I have read a few of the articles on your website now, and I really like your style. Thanks a million and please keep up the effective work.http://www.china-clothing-manufacturer.net/"
    target="_blank">clothing manufacturer

  58. Master SEO says:

    This was a really great contest and hopefully I can attend the next one. It was alot of fun and I really enjoyed myself..
    #MasterSEO: https://www.distributorseo.co.id/">Jasa Seo Murah Berkualitas

  59. Muktasir says:

    Amazing! Its genuinely awesome piece of writing.
    site: http://www.distributorseo.co.id

  60. Distributor Indonesia says:

    An impressive share! I have just forwarded this onto a friend who was conducting a little homework on this.
    And he in fact ordered me lunch simply because I stumbled upon it for
    him… lol. So let me reword this…. Thanks for the meal!!
    But yeah, thanks for spending some time to discuss this subject here
    on your blog. http://faedahjaya.com

  61. Iklan Temanggung says:

    Hi there, every time i used to check webpage posts here in the early hours in the daylight, since i like
    to find out more and more. http://www.iklantemanggung.com

  62. http://www.downeastcoconut.com says:

    Wow what a Great Information about World Day its very nice informative post. thanks for the post.
    http://www.downeastcoconut.com">http://www.downeastcoconut.com

  63. panama says:

    Do not obtain mentally purchased exactly what’s happening and also simply
    aim to overlook it. http://panamaliving-realestate.com">panama

  64. pulsa says:

    Excellent blog you have got here.. It’s hard to find quality writing like yours these days.
    I really appreciate individuals like you! Take care!!
    http://www.distributorpulsa.co.id

  65. hosting says:

    Hello friends, good piece of writing and fastidious arguments commented at this place, I
    am actually enjoying by these. http://www.distributorhosting.co.id

  66. panamaliving-realestate.com says:

    This topic has always been one of my favorite subjects to read about. I have found your post to be very rousing and full of good information. I will check your other articles shortly.
    http://panamaliving-realestate.com">panamaliving-realestate.com

  67. Healthy says:

    Hello ! I just wish to give an enormous thumbs up for the nice info you’ve got right here on this post. I will probably be coming back to your weblog for more soon.
    http://healthynovato.org">Healthy

  68. http://www.bonniebrulee.com says:

    A very awesome blog post. We are really grateful for your blog post. You will find a lot of approaches after visiting your post. I was exactly searching for. Thanks for such post and please keep it up. Great work.
    http://www.bonniebrulee.com">http://www.bonniebrulee.com

  69. www.refinancebest.com says:

    It is usually wise to time to analyse every one of the business tips and options before choosing anybody. After almost all, you are buying a franchise option that may pay you in the end. 
    http://www.refinancebest.com">www.refinancebest.com

  70. Philomath Club says:

    It is one of the best information which you are providing. I love your blog because it totally full of informative posts. You are nice one and thanks for sharing.
    http://www.philomathrotary.org">Philomath Club

  71. eastcoastautocrafting.com says:

    Thanks for the discuss. Liked all the details you that you have mentioned to us, very useful and effective!
    http://eastcoastautocrafting.com">eastcoastautocrafting.com

  72. bisnis laundry says:

    I was verifying consistently this web blog and I’m impressed! Extremely details specifically the last part I care for such information and facts much. I was searching for this certain details for some time
    http://www.franchiselaundry.com

  73. Sewa mobil di malang says:

    Get marvellous satisfaction with Independsent Kolkata Escorts Anupama Singh, 22 year old beautiful and sensual female escorts offers the hot call girls services in Kolkata with normal rates.
    http://grandrentcarmalang.com

  74. download gmod free says:

    Really appreciate this wonderful post that you have provided for us.
    http://en.community.dell.com/members/gmodfree">download gmod free