Effects of Machine Account Replication on a Domain
Microsoft Knowledge Base Article: 175468 -
For each Windows NT Workstation that is a member of a domain, there is a discrete communication channel (for example, the secure channel) with a domain controller.
The secure channel's password is stored along with the computer
account on the primary domain controller (PDC), and is replicated to
all backup domain controllers (BDCs). The password is also in LSA
secret $MACHINE.ACC of the workstation. Each workstation owns such
secret data. Every seven days, the workstation sends a secure
channel password change and the computer account password is
updated. If the primary domain controller (PDC) is running Windows
NT 4.0 Service Pack 3 or earlier, the computer account password
changes are marked as "Announce Immediate" and each time a
computer account password is modified, a replication takes place
immediately. If the PDC is running Windows NT 4.0 Service Pack 4 or
later, the computer account is replicated during the next
replication pulse. A new Netlogon parameter is available as a hotfix
so that the 7-day period may be extended up to 1,000,000 days. For
Windows 2000, the default computer account password change is 30
days.
Automatic Computer Name Generator Does Not "Zero Fill" Numbers
Microsoft Knowledge Base Article: 223194 - The Remote Installation Service (RIS) has a feature that allows the service to automatically generate computer names for computers using RIS to install Windows 2000 Professional. Administrators can customize these automatically generated name
Batch File Adds/Removes Machine Accounts in Server Manager
Microsoft Knowledge Base Article: 140387 - An Windows NT network administrator may have to add a large number of Windows NT Workstations or Non-Domain Controller Servers to a domain's Machine Account database, which is accessed and maintained by the Server Manager user
interface.
Cannot Add Computer to Windows NT 4.0-Based Domain; Error Message Cites Lack of Computer Account
Microsoft Knowledge Base Article: 285016 - When you attempt to add a Microsoft Windows 2000 Professional-based computer to a Microsoft Windows NT 4.0-based domain, you may find that you cannot do so and you may receive the following error message:
Your computer could not be joined to the
domain because the following error has occurred: The security
database on the server does not have a computer account for this
workstation trust relationship.
Cannot Change Computer Name of a Domain Controller
Microsoft Knowledge Base Article: 195242 - The computer name of a Windows 2000 domain controller cannot be changed for this release of Windows
2000.
Changing Computer Name in Windows 2000 Requires Restart
Microsoft Knowledge Base Article: 228544 - When you change your computer name or domain membership on a Microsoft Windows 2000 computer, each step must be performed separately with a shut down and restart you computer for the change to take
effect.
Computer Name and Host Name Must Be the Same in Windows 2000
Microsoft Knowledge Base Article: 227410 - In Windows 2000, you cannot specify different host (Directory Naming Service, or DNS) and computer (NetBIOS)
names.
Computer Name Setup Allows Invalid Characters in Computer Name
Microsoft Knowledge Base Article: 228275 - In the GUI-mode portion of Setup, when you are prompted for the computer name, you are allowed to enter nonstandard characters (for example, "qw#$%^_fg"). If you do so, you receive a warning about using a non-DNS name, but you are allowed to
Duplicate Computer Names Are Created When Sysprep.exe Generates Random Computer Names
Microsoft Knowledge Base Article: 317606 - When you deploy an image on your network computers, the computer names that are generated by Sysprep.exe may be duplicated. If this occurs, you may receive an error message that indicates that duplicate computer names exist on your
network.
Problems When Windows 2000 Locale and Computer Name Do Not Match
Microsoft Knowledge Base Article: 248879 - When you change the system locale on your Windows 2000-based computer, and then restart your computer, you may experience one or more of the following
symptoms:
Spaces Not Allowed in a NetBIOS Computer Name
Microsoft Knowledge Base Article: 204032 - Although spaces are allowed in NetBIOS computer names in Microsoft Windows NT 4.0, spaces are not allowed in NetBIOS computer names in Windows
2000.
Sysprep Does Not Rename Accounts Containing the Computer Name
Microsoft Knowledge Base Article: 214679 - Some programs may create user accounts that contain the computer name. For example, Microsoft Transaction Server (MTS) creates an
MTS
There May Be a Delay in Mapping SIDs to Account Names If the Computer Name Contains More Than 15 Characters
Microsoft Knowledge Base Article: 319819 - When you want to display the ACL by using the standard Explorer.exe user interface, there may be a long delay while the SIDs are mapped to account names. This occurs only if you have set the ACL for local accounts, and if your computer name
exceeds 15 characters.
Unable to Change Windows 2000 Professional Computer Name When in Windows NT 4.0 Domain
Microsoft Knowledge Base Article: 244478 - When you try to change the name of a computer running Microsoft Windows 2000 Professional and the computer is a member of a Microsoft Windows NT 4.0-based domain, you cannot do
so.
Underscores Are Not Valid for DNS Computer Names
Microsoft Knowledge Base Article: 199011 - Windows 2000 Setup changes underscore characters (_) in server and workstation computer names to dashes (-). This occurs because Active Directory is based on DNS, and underscore characters may not be valid DNS
characters.
Use of "&" Symbol in Server Names Causes Logon Scripts to Fail
Microsoft Knowledge Base Article: 142691 - When you install a Domain Controller with the ampersand character (&) in the server name, Microsoft Windows NT clients cannot process logon scripts. You may see a command shell opened with an error message that the specified file was not found.
Windows 2000 Does Not Permit All-Numeric Computer Names
Microsoft Knowledge Base Article: 244412 - Windows 2000-based computers cannot have computer names that consist only of numbers. However, Microsoft Windows NT-based computers can have computer names that consist only of
numbers.
|
