Windows

General discussion

Locked

Ed Bott's Microsoft Challenge -- 1/20/00

By ebott ·
Do you know how to keep from falling into three common Setup traps? I?m looking for the correct solution to these three problems:
1. You want your users to set strong passwords that can?t be cracked through dictionary attacks. What?s the undocumented command-line option that lets you automatically assign a strong password to a given user account?
2. Inaccurate time settings can wreak havoc on a network. What?s the best way to guarantee that all Windows 2000 PCs on a domain are set to the correct time?
3. How big is Windows 2000?s default swapfile? How do you change its size?

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

Ed Bott's Microsoft Challenge -- 1/20/00

by ron_s_davis In reply to Ed Bott's Microsoft Chall ...

#1 Run passprop /complex to set passwords to be strong. This forces passwords to have a mixture of upper and lower-case, symbols or numbers.
#2 Set up Active Directory on your Domain, all machines will synchronize their time with the domain controller automatically.
#3 Windows 2000 sets the swap file to the amount of memory in the system, plus 14 megs. This can be changed by follwing these steps: Start; Settings; Control Panel; System; Advanced; Under virtual memory Change; set the initial and maximum values, then click Set, then ok

Collapse -

Ed Bott's Microsoft Challenge -- 1/20/00

by ebott In reply to Ed Bott's Microsoft Chall ...

The question was auto-closed by TechRepublic

Collapse -

Ed Bott's Microsoft Challenge -- 1/20/00

by gobbard In reply to Ed Bott's Microsoft Chall ...

2. Use a logon scipt to run:
NET TIME \\computername /SET

3. Default is 1.5 times physical memory if RAM is less than 2GB, or 2GB if RAM is greater and can be changed through properties of 'My Computer' (Advanced tab - performace options.)

Collapse -

Ed Bott's Microsoft Challenge -- 1/20/00

by ebott In reply to Ed Bott's Microsoft Chall ...

The question was auto-closed by TechRepublic

Collapse -

Ed Bott's Microsoft Challenge -- 1/20/00

by robert406 In reply to Ed Bott's Microsoft Chall ...

1. If a strong password policy is implemented in the active directory users and computers, use the dsmigrate utility to gernerate random strong passwords for any migrated or new user accounts.
2. The Windows Time service is implemented on Windows 2000 by default any authenticating domain controler is used as an syncronizing partner. The PDC is nominated by the authenticating controlers as the master time source. You would then use the net time/set sntp:(Anyone of the internet sntp servers) so that the PDC is correct. You must also ensure that if you are using a firewall ect. that port 123 is open to the internet. If not you cannot connect to one of the Internet sntp servers.
3. The minimum is 2mb. By default the swapfile (Pagefile which is the correct term to use)is equal to the lessor of the total physical memory plus 12meg or the amount of available disk space. To change this right click my computer, then click the advanced tab then click performance options. Click Change in the drive box click

Collapse -

Ed Bott's Microsoft Challenge -- 1/20/00

by ebott In reply to Ed Bott's Microsoft Chall ...

The question was auto-closed by TechRepublic

Collapse -

Ed Bott's Microsoft Challenge -- 1/20/00

by vgendelman In reply to Ed Bott's Microsoft Chall ...

2. Set the following command in the logon script for all users.
NET TIME \\SERVERNAME /SET /YES

3. To change the size of the swap file you would go to Performance Tab, under System in Control Panel, and there you go to virtual memory where youwill be able to change the size of the swap file

Collapse -

Ed Bott's Microsoft Challenge -- 1/20/00

by ebott In reply to Ed Bott's Microsoft Chall ...

The question was auto-closed by TechRepublic

Collapse -

Ed Bott's Microsoft Challenge -- 1/20/00

by John Allhiser In reply to Ed Bott's Microsoft Chall ...

1. net accounts /uniquepw:##

2. If the network is ideally configured for Windows 2000, there are several options: Using the DHCP Time Server option is the easiest. Use the command: NET TIME /setsntp:
(list of servers etc.) Use this in a logonscript for Workstation and Professional. Another way is to edit the registry: HKeyLM\System\CurrentControlSet\Services\W32Time\Parameters -- for the value list the servers using DNS or IP separated by semicolons, then change the type Registry key from Nt5DS to NTP. This will give time control to an NTP server instead of the default settings on each computer.

3. Ram + 12MB. Control Panel, System, Advanced, Perfomance Options, Change. Also My Computer, Properties, System, Etc.

Collapse -

Ed Bott's Microsoft Challenge -- 1/20/00

by ebott In reply to Ed Bott's Microsoft Chall ...

The question was auto-closed by TechRepublic

Related Discussions

Related Forums