?
Solved

Removal of LAN Manager hashes of legacy user account passwords AD

Posted on 2014-10-22
2
Medium Priority
?
156 Views
Last Modified: 2014-12-10
Hello -

Active Directory is storing LAN Manager (LM) hashes of legacy user account passwords.  We are looking to change service account passwords to force Active Directory to no longer store the LAN Manager (LM) password hash. Some of ours still exist because the account hasn't logged in service account. For example, we have an account called calendar we used for setup, no one has logged in it since the day of setup. How do we go about removing it and others?
0
Comment
Question by:First Last
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 71

Accepted Solution

by:
Chris Dent earned 2000 total points
ID: 40398736
Delete the account if it's not used.

Disabling LAN manager hashes should have no negative impact unless you have something archaic which is explicitly reliant on that.

Chris
0
 
LVL 39

Expert Comment

by:Aaron Tomosky
ID: 40399706
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
Active Directory can easily get cluttered with unused service, user and computer accounts. In this article, I will show you the way I like to implement ADCleanup..
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Suggested Courses

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question