Petr,

What error is logged on the server/workstation and/or the DC when the logon
fails? Is it Security event ID 534 ("The user has not been granted the
requested logon type at this machine") or something else?

-----Original Message-----
From: Matt [mailto:smp.repicky (at) gmail (dot) com [email concealed]]
Sent: Wednesday, March 16, 2005 3:53 PM
To: Petr Merta
Cc: focus-ms (at) securityfocus (dot) com [email concealed]
Subject: Re: UF_PASSWD_NOTREQD user account flag

Not saying i've done any lookup on the flag or anything, but i know of a
local security policy setting that exists that says that user accounts
without passwords can only have console logon (log on locally). Doesn't
explain why you can't access the machine without a password via SM. I
believe network logon is controlled through the user rights assignment in
the local security settings (or domain if you're networked) on a per user
basis that can be set to allow/deny remote access to the machine to specific
users. It also can be controlled through network access in the security
options tab. There is one setting that is turned on by default with simple
file sharing that says all network access is performed as user guest.

Hope that gives you some hints.

--

On Wed, 16 Mar 2005 00:23:36 +0100, Petr Merta <pmerta (at) lynguent (dot) com [email concealed]> wrote:
> Hi all,
>
> can anybody here explain the real meaning of UF_PASSWD_NOTREQD flag of
> Windows user account? I've found bunch of user accounts in W2K domain
> with this flag set; when I've tried to perform interactive or network
> logon with them, it failed. I've found no descriptive documentation
> besides of vague "password not required" statement. My questions are:
> -- what's the actual meaning of this flag?
> -- are there some circumstances under which it is possible to logon to
> account with this flag set (without password)?
>
> Thanks for any info and/or reference.
>
> Petr
>
> ----------------------------------------------------------------------
> -----
> ----------------------------------------------------------------------
> -----
>
>

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]