Passprop signature ???

[Andrew Skatoff]

I am tyring to audit a windows 2000 AD environment.

Our infosec standards say that we need to use passprop to allow the local
admin account to be locked out after repeated login failures.
A few problems
1. Is Passprop part of the w2k resource kit? We don't seem to have it
on our servers even thought the reskit is installed.
2. If it has been used how can this configuration be audited without
acutally tyring to lock out the account? Is there a registry key or dll that
is modified that I can check??

Any help would be greatly appreciated. I can't find much on the web about
this.

-Andrew Skatoff

 

[Steven Umbach]

See link below for a download. It is still supposed to allow administrator to
logon locally to domain controllers after a lockout. Be sure to test it out on
your network. As long as you have other accounts in the domain admins group, you
should be OK. --- Steve

http://www.petri.co.il/download_free_reskit_tools.htm
http://www.jsifaq.com/sube/tip2000/rh2077.htm

 

[Andrew Skatoff]

Steven,

Are you aware if this tool leaves any traces behind? I need something to
audit.

 

[Steven L Umbach]

Sorry, I don't know of one though there must be some way. -- Steve