Turning off password encryption (Clients). 1

[stla]

Hello, this is a summary of what I have undertaken on my network with the help of many users of the forums. I hope it helps someone else.

Situation: If the network has WIN2000, XP Home or Pro users, then the globals encrypt passwords can be set to YES.

If however there is an NT client set the encrption to NO and undertake the following on ALL the clients that need access to the share:
-----------------
XP PRO =
go to Start > Control Panel > Administrative Tools > Local Security Policy >Local Policies > Security Options
Enable Microsoft Network Client: Send unencrypted passwod to third-party SMB servers

-----------------
XP HOME and WIN 2000=
go to Start > Control Panel > Run > regedt32
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkStation\Parameters
Add Value
"EnablePlainTextPassword"=REG_DWORD:1 (Hex)

-----------------
WIN NT4 with SP5 =

go to Start > Control Panel > Run > regedt32
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Rdr\Parameters
Add Value
"EnablePlainTextPassword"=REG_DWORD:1 (Hex)

It was necessary to turn the computer off to take a effect, a reboot was not sufficient enough.

 

[jad]

NT should be able to have encrypted passwords, what patches have you installed? (SP3 i believe for NT had the requisite patch.)

i have as well a patch to make windows 95 use encrypted passwords as well, so it is possible to get many computers to talk encrypted.

the registry files needed to set unencrypted passwords can be got from the CVS at:

http://samba.org/cgi-bin/cvsweb/samba-docs/Registry/

 

[stla]

Thnaks for the information.

All the WIN NT servers are using NT 4.0 with SP5. Can I ask you to take a look at my most recent question pertaining to mapping users?

Best regards