|
1 | 1 | --- |
2 | 2 | title: NTLM network authentication changes |
3 | | -description: Describes new behavior in Windows Server 2003 SP1 that affects NTLM password changes. After you install the service pack, domain users can change a password and still use their old password to authenticate. This setting can be changed in the registry. |
4 | | -ms.date: 01/15/2025 |
| 3 | +description: Describes a new behavior in Windows Server 2003 SP1 that affects NTLM password changes and how to use a registry to change the behavior. |
| 4 | +ms.date: 04/15/2025 |
5 | 5 | manager: dcscontentpm |
6 | 6 | audience: itpro |
7 | 7 | ms.topic: troubleshooting |
8 | | -ms.reviewer: kaushika |
| 8 | +ms.reviewer: kaushika, maotori,herbertm |
9 | 9 | ms.custom: |
10 | 10 | - sap:windows security technologies\legacy authentication (ntlm) |
11 | 11 | - pcy:WinComm Directory Services |
12 | 12 | --- |
13 | | -# New setting modifies NTLM network authentication behavior |
| 13 | +# Setting in NTLM network authentication behavior allows the use of the previous password |
14 | 14 |
|
15 | | -This article describes new behavior that affects NTLM password changes and how to change this behavior by using a registry. |
| 15 | +This article describes a behavior that affects NTLM password changes and how to change this behavior by using a registry. |
16 | 16 |
|
17 | 17 | _Original KB number:_ 906305 |
18 | 18 |
|
19 | 19 | ## Introduction |
20 | 20 |
|
21 | | -Beginning with Microsoft Windows Server 2003 Service Pack 1 (SP1), there is a change to NTLM network authentication behavior. Domain users can use their old password to access the network for one hour after the password is changed. Existing components that are designed to use Kerberos for authentication are not affected by this change. |
| 21 | +There is an option in NTLM network authentication when a user password is changed. Domain users can use their old password to access the network for five minutes after the password is changed. Existing components that are designed to use Kerberos for authentication are not affected by this change. |
22 | 22 |
|
23 | 23 | The goal of this change is to allow background processes such as services to continue running for some time until an administrator has the opportunity to update the credentials for the new password. |
24 | 24 |
|
@@ -52,7 +52,7 @@ To do this, follow these steps: |
52 | 52 | 6. In the **Value data** box, type the value in minutes that you want to use, and then click **OK**. |
53 | 53 |
|
54 | 54 | > [!NOTE] |
55 | | - > The lifetime period is set in minutes. If this registry value is not set, the default lifetime period for an old password is 60 minutes. |
| 55 | + > The lifetime period is set in minutes. If this registry value is not set, the default lifetime period for an old password is five minutes. |
56 | 56 |
|
57 | 57 | 7. Quit Registry Editor. |
58 | 58 |
|
|
0 commit comments