JSI Tip 1788. Trust can be created with incorrect password.

Starting with SP4, the NetLogon service caches old passwords for trusts.

If you:

1. Create the first direction of a trust successfully.

2. Create the second direction of the trust successfully.

3. Delete the second direction of the trust.

4. Re-create the second direction of the trust with a different password.

The trust is successfully created.

NetLogon used the cached correct password to validate the relationship.

The workaround is to delete the trust from both sides of the relationship.

Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish