Effects of Machine
Account Replication on a Domain
Microsoft Knowledge Base Article: 175468 - For each
Windows NT Workstation that is a member of a domain,
there is a discrete communication channel (for example,
the secure channel) with a domain controller. The
secure channel's password is stored along with the
computer account on the primary domain controller
(PDC), and is replicated to all backup domain controllers
(BDCs). The password is also in LSA secret $MACHINE.ACC
of the workstation. Each workstation owns such secret
data. Every seven days, the workstation sends a
secure channel password change and the computer
account password is updated. If the primary domain
controller (PDC) is running Windows NT 4.0 Service
Pack 3 or earlier, the computer account password
changes are marked as "Announce Immediate" and each
time a computer account password is modified, a
replication takes place immediately. If the PDC
is running Windows NT 4.0 Service Pack 4 or later,
the computer account is replicated during the next
replication pulse. A new Netlogon parameter is available
as a hotfix so that the 7-day period may be extended
up to 1,000,000 days. For Windows 2000, the default
computer account password change is 30 days.
Automatic Computer
Name Generator Does Not "Zero Fill" Numbers
Microsoft Knowledge Base Article: 223194 - The
Remote Installation Service (RIS) has a feature
that allows the service to automatically generate
computer names for computers using RIS to install
Windows 2000 Professional. Administrators can
customize these automatically generated name
Batch File Adds/Removes
Machine Accounts in Server Manager
Microsoft Knowledge Base Article: 140387 - An
Windows NT network administrator may have to add
a large number of Windows NT Workstations or Non-Domain
Controller Servers to a domain's Machine Account
database, which is accessed and maintained by
the Server Manager user interface.
Cannot Add Computer
to Windows NT 4.0-Based Domain; Error Message
Cites Lack of Computer Account
Microsoft Knowledge Base Article: 285016 - When
you attempt to add a Microsoft Windows 2000 Professional-based
computer to a Microsoft Windows NT 4.0-based domain,
you may find that you cannot do so and you may
receive the following error message: Your
computer could not be joined to the domain because
the following error has occurred: The security
database on the server does not have a computer
account for this workstation trust relationship.
Cannot Change Computer
Name of a Domain Controller
Microsoft Knowledge Base Article: 195242 -
The computer name of a Windows 2000 domain controller
cannot be changed for this release of Windows
2000.
Changing Computer
Name in Windows 2000 Requires Restart
Microsoft Knowledge Base Article: 228544 - When
you change your computer name or domain membership
on a Microsoft Windows 2000 computer, each step
must be performed separately with a shut down
and restart you computer for the change to take
effect.
Computer Name
and Host Name Must Be the Same in Windows 2000
Microsoft Knowledge Base Article: 227410 - In
Windows 2000, you cannot specify different host
(Directory Naming Service, or DNS) and computer
(NetBIOS) names.
Computer Name Setup
Allows Invalid Characters in Computer Name
Microsoft Knowledge Base Article: 228275 - In
the GUI-mode portion of Setup, when you are prompted
for the computer name, you are allowed to enter
nonstandard characters (for example, "qw#$%^_fg").
If you do so, you receive a warning about using
a non-DNS name, but you are allowed to
Duplicate Computer
Names Are Created When Sysprep.exe Generates Random
Computer Names Microsoft Knowledge Base
Article: 317606 - When you deploy an image on
your network computers, the computer names that
are generated by Sysprep.exe may be duplicated.
If this occurs, you may receive an error message
that indicates that duplicate computer names exist
on your network.
Problems When Windows
2000 Locale and Computer Name Do Not Match
Microsoft Knowledge Base Article: 248879 - When
you change the system locale on your Windows 2000-based
computer, and then restart your computer, you
may experience one or more of the following symptoms:
Spaces Not Allowed
in a NetBIOS Computer Name
Microsoft Knowledge Base Article: 204032 - Although
spaces are allowed in NetBIOS computer names in
Microsoft Windows NT 4.0, spaces are not allowed
in NetBIOS computer names in Windows 2000.
Sysprep Does Not
Rename Accounts Containing the Computer Name
Microsoft Knowledge Base Article: 214679 -
Some programs may create user accounts that contain
the computer name. For example, Microsoft Transaction
Server (MTS) creates an MTS
There May Be a Delay
in Mapping SIDs to Account Names If the Computer
Name Contains More Than 15 Characters
Microsoft Knowledge Base Article: 319819 - When
you want to display the ACL by using the standard
Explorer.exe user interface, there may be a long
delay while the SIDs are mapped to account names.
This occurs only if you have set the ACL for local
accounts, and if your computer name exceeds 15
characters.
Unable to Change
Windows 2000 Professional Computer Name When in
Windows NT 4.0 Domain
Microsoft Knowledge Base Article: 244478 - When
you try to change the name of a computer running
Microsoft Windows 2000 Professional and the computer
is a member of a Microsoft Windows NT 4.0-based
domain, you cannot do so.
Underscores Are Not
Valid for DNS Computer Names
Microsoft Knowledge Base Article: 199011 - Windows
2000 Setup changes underscore characters (_) in
server and workstation computer names to dashes
(-). This occurs because Active Directory is based
on DNS, and underscore characters may not be valid
DNS characters.
Use of "&" Symbol
in Server Names Causes Logon Scripts to Fail
Microsoft Knowledge Base Article: 142691 - When
you install a Domain Controller with the ampersand
character (&) in the server name, Microsoft
Windows NT clients cannot process logon scripts.
You may see a command shell opened with an error
message that the specified file was not found.
Windows 2000 Does
Not Permit All-Numeric Computer Names
Microsoft Knowledge Base Article: 244412 - Windows
2000-based computers cannot have computer names
that consist only of numbers. However, Microsoft
Windows NT-based computers can have computer names
that consist only of numbers.
|
