PDA

View Full Version : How to change of interval for secure identifier request!


RedTop
December 5th 03, 08:15 PM
My question is quite simply, how do I change the interval at which the
Windows XP clients (Home as well as Pro), request a new secure
identifier from the server?

The background is that I have just started working for an organisation
which have some 16 stand alone computers, with something called a
called a "safety card" installed.

This "safety card" insures that the computers, every single time they
boot, boot in the pre defined ideal condition, never mind whatever the
users have done software wise to machines previously.

This of cause also means that the new SID that the clients receive
from the server every so often is also deleted, so they cannot log on
to the network!

In Windows 2000, I used to change the interval at which the clients
requested the new SID from the standard 30 days to 1,000,000 days,
thus solving the difficulties (mainly because no computer last for
such a long time – at the same time as this is the max. period of time
which can be entered in the interval)!

Thank you all for your answers in advance.

Regards

RedTop

Roger Abell [MVP]
December 5th 03, 08:15 PM
I am a little confused as you said standalone clients, but the=20
behavior you describe happens in a domain (and, BTW it is=20
not a change of SID but of password).
Anyway, the way to do this in XP as in W2k is with the=20
policy setting to Disable machine account password change
It is a Domain client policy within the Security settings area=20
of Local Policy which is under the Computer node in the=20
Windows Security Settings

If you are having this issue with Home I am lost, and if you=20
do not have a domain the above is useless. However, I have=20
advised people to use (successfully) this solution in W2k=20
domains where they have machine with image reset on=20
boot provisioning. I would not ever recommend using this=20
setting except in exceptional cases as that, so take this all=20
with a big grain of salt (if you have no domain).

(PS. policy is not available with Home edition)
--=20
Roger=20

"RedTop" > wrote in message =
m...
> My question is quite simply, how do I change the interval at which the
> Windows XP clients (Home as well as Pro), request a new secure
> identifier from the server?
>=20
> The background is that I have just started working for an organisation
> which have some 16 stand alone computers, with something called a
> called a "safety card" installed.
>=20
> This "safety card" insures that the computers, every single time they
> boot, boot in the pre defined ideal condition, never mind whatever the
> users have done software wise to machines previously.
>=20
> This of cause also means that the new SID that the clients receive
> from the server every so often is also deleted, so they cannot log on
> to the network!
>=20
> In Windows 2000, I used to change the interval at which the clients
> requested the new SID from the standard 30 days to 1,000,000 days,
> thus solving the difficulties (mainly because no computer last for
> such a long time - at the same time as this is the max. period of time
> which can be entered in the interval)!
>=20
> Thank you all for your answers in advance.
>=20
> Regards
>=20
> RedTop

Google