Solved

Are passwords encrypted in transit

Posted on 2014-01-17
9
846 Views
Last Modified: 2014-03-05
For audit purposes, I need to report that policy has set "Passwords Encrypted in Transit" on over 5000 Windows servers. Operating systems range from Windows 2003 through 2012. I have been unable to find a registy setting that corresponds to this policy setting. Any ideas?
0
Comment
Question by:ServerTec
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
  • +1
9 Comments
 
LVL 11

Expert Comment

by:Alex Green
ID: 39788934
They are encrypted using Kerberos encryption if I remember correctly
0
 

Author Comment

by:ServerTec
ID: 39789231
I don't need to know how it's done, I need to know how to report that it's been done.
0
 
LVL 81

Expert Comment

by:David Johnson, CD, MVP
ID: 39789823
It is a function of the operating system (kerberos)
0
SharePoint Admin?

Enable Your Employees To Focus On The Core With Intuitive Onscreen Guidance That is With You At The Moment of Need.

 
LVL 11

Expert Comment

by:Alex Green
ID: 39790172
It's in as default IIRC
0
 
LVL 44

Expert Comment

by:Darr247
ID: 39792379
See if the Kerberos status show up in the HTML file generated by the command
gpresult /F /H GPreport.htm

Open in new window

That file should be made in your user folder if that's run from the standard CMD window.

If so, a FOR/DO batch should be possible that uses a list of all the servers as the input.
0
 

Author Comment

by:ServerTec
ID: 39801004
ERROR: Invalid argument/option - '/F'

The /H argument also appears to be invalid. Is the intention to write the results of gpresult to a file?
0
 
LVL 44

Expert Comment

by:Darr247
ID: 39801740
Interesting... do ANY of the parameters listed in
http://technet.microsoft.com/en-us/library/cc733160.aspx
work for you?
0
 

Accepted Solution

by:
ServerTec earned 0 total points
ID: 39895425
It turns out that the auditors really wanted to know the setting of "passwords are stored useing reversible encryption" in policy. Thanks to all for their efforts in addressing my question.
0
 

Author Closing Comment

by:ServerTec
ID: 39905878
It turns out that the auditors really wanted to know the setting of "passwords are stored useing reversible encryption" in policy. Thanks to all for their efforts in addressing my question.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I will show you HOW TO: Perform a Physical to Virtual (P2V) Conversion the easy way from a computer backup (image).
Configuring Remote Assistance for use with SCCM
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question