Password can be changed without logining in

Hello,

In our VA Scan done through 3rd party, one of the observation came as Password can be changed without logining in. The solution provided was to set a registry entry to RequireLogonToChangePassword = 1. We are not able to find this entry & need help how to set it up.

Regards
Ashish
syinfraSenior Deputy ManagerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Shaun VermaakTechnical Specialist/DeveloperCommented:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\
DWORD RequireLogonToChangePassword
0
oBdACommented:
You should maybe tell your "3rd party" to update their scans, like, every once in a decade or so. Time has moved on since Windows NT4, which is the last OS where this key actually applied.
2.2.1.1 Password Policies
https://msdn.microsoft.com/en-us/library/cc232772.aspx
Windows ignores the RequireLogonToChangepassword setting.
There used to be a Microsoft KB article 255776, "User Must Log On in Order to Change Password" Option No Longer Exists, but this was for Windows 2000, which is long out of support now, so the article has been removed. It said something about this policy still being documented, but that the setting had been removed in Windows 2000 and that the documentation was incorrect.
That policy wouldn't really make sense, since the user needs to have a network connection to the domain and his old password to change his password, which is similar enough to being logged on as to not make a difference in this case.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
oBdACommented:
Scan outdated as per Microsoft documentation.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Operating Systems

From novice to tech pro — start learning today.