Hey y’all Mark and Tom here. Bet you thought we’d miss this week too. We’ve been a bit busy over here so that would mostly explain it. That and I’m in two fantasy baseball leagues this year. My nerdiness extends into sports as well thank you very much. Tom was doing something nerdy as well…..probably. Anyways keep sending the questions and we’ll keep answering them. Let’s jump in.
I noticed a bunch of user accounts in my domain have "password not required" set. What gives? Should I fix it?
Yes, you should.
Certain provisioning software (including dsadd) will create the accounts with the user account control attribute set to 0x220 hex, or 544 decimal. That indicates PASSWD_NOTREQD and NORMAL_ACCOUNT. The default value for a standard user created via ADUC, with no other options enabled would be 0x200, or 512 decimal.
While having this set isn't the end of the world, as users will still have to enter a password in the UI while changing the password, it IS possible that an administrator could reset the user's password to blank, not requiring a password at all for logon. Obviously we don't want that.
And that should return all of the accounts with password not required set. You'll probably want to scope that down to a specific OU, as the above syntax will get ALL accounts. There might be a valid reason to leave it in place. If we pipe that to Set-ADUser with a few switches, we can remove the value and security will stop complaining.
-True Detective season 2 teaser trailer just appeared and it’s awesome like you’d expect. Watch season 1 if you missed it.
-Hockey playoffs are here for both professional, college and high school. However Minnesota takes their high school hockey extra seriously with the all hockey hair team .
-Also the NHL needs to get rid of the " Loser Point ". Tom and I both co-sign on this decision.
-Baseball has just started, the best time of year. Listen to Domingo , a 7-time Infielder of the Year and 6-time Outfielder of the Year award winner (two years overlapping when he played both SS and LF in order to hit twice in the lineup), get you prep'd on Opening Day . Watch his other videos unless you are Semi-Pro or worse….Sunday League.
Mark “that one got too much of my bat” Morowczynski and Tom “cage bombs” Moser