| | 1 | == How to Keep Virtual Machines in a Windows Domain == |
| | 2 | |
| | 3 | VMWare and HyperV virtual machines will often lose their membership in a Windows Domain (not to be confused with an Internet Domain) for a complex variety of reasons. One of these reasons is the automatic password change procedure followed between the windows domain client and the domain server. In this process, the domain client (your PC or VM) renegotiates a new secret password with the domain server, which they both "remember" for future interactions. |
| | 4 | |
| | 5 | Disabling the password changing process is an important partial remedy to the lost domain membership problem. By disabling the automatic password change, the chances for your VM to be dropped from the domain are greatly reduced. |
| | 6 | |
| | 7 | The hidden password in question is a shared secret between the domain server and your machine. It is already protected as well as Windows can protect any password, and thus it seems relatively safe to stop updating this password for test machines that are continually reverted. |
| | 8 | |
| | 9 | This change is only needed on the client side, not on the domain controller. The domain password change feature is disabled by adding a value in the registry key at: |
| | 10 | |
| | 11 | {{{ |
| | 12 | HKEY_LOCAL_MACHINES\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters |
| | 13 | }}} |
| | 14 | |
| | 15 | called {{{DisablePasswordChange}}} which should be of type {{{REG_DWORD}}} and have a value of 1. |
| | 16 | |
| | 17 | This can be done from the Windows command line with this command: |
| | 18 | |
| | 19 | {{{ |
| | 20 | reg add HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters /v DisablePasswordChange /t REG_DWORD /d 1 /f |
| | 21 | }}} |
