Solved

Are passwords encrypted in transit

Posted on 2014-01-17
9
740 Views
Last Modified: 2014-03-05
For audit purposes, I need to report that policy has set "Passwords Encrypted in Transit" on over 5000 Windows servers. Operating systems range from Windows 2003 through 2012. I have been unable to find a registy setting that corresponds to this policy setting. Any ideas?
0
Comment
Question by:ServerTec
  • 4
  • 2
  • 2
  • +1
9 Comments
 
LVL 7

Expert Comment

by:Alex Green
ID: 39788934
They are encrypted using Kerberos encryption if I remember correctly
0
 

Author Comment

by:ServerTec
ID: 39789231
I don't need to know how it's done, I need to know how to report that it's been done.
0
 
LVL 79

Expert Comment

by:David Johnson, CD, MVP
ID: 39789823
It is a function of the operating system (kerberos)
0
Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

 
LVL 7

Expert Comment

by:Alex Green
ID: 39790172
It's in as default IIRC
0
 
LVL 44

Expert Comment

by:Darr247
ID: 39792379
See if the Kerberos status show up in the HTML file generated by the command
gpresult /F /H GPreport.htm

Open in new window

That file should be made in your user folder if that's run from the standard CMD window.

If so, a FOR/DO batch should be possible that uses a list of all the servers as the input.
0
 

Author Comment

by:ServerTec
ID: 39801004
ERROR: Invalid argument/option - '/F'

The /H argument also appears to be invalid. Is the intention to write the results of gpresult to a file?
0
 
LVL 44

Expert Comment

by:Darr247
ID: 39801740
Interesting... do ANY of the parameters listed in
http://technet.microsoft.com/en-us/library/cc733160.aspx
work for you?
0
 

Accepted Solution

by:
ServerTec earned 0 total points
ID: 39895425
It turns out that the auditors really wanted to know the setting of "passwords are stored useing reversible encryption" in policy. Thanks to all for their efforts in addressing my question.
0
 

Author Closing Comment

by:ServerTec
ID: 39905878
It turns out that the auditors really wanted to know the setting of "passwords are stored useing reversible encryption" in policy. Thanks to all for their efforts in addressing my question.
0

Featured Post

Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This is an article about Leadership and accepting and adapting to new challenges. It focuses mostly on upgrading to Windows 10.
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question