Use the same password in two different domains
Top  Previous  Next


The normal thing to do is of course to establish a trust relationship in MMC/User Manager, but in cases where you do not want to do that, follow these instructions:

·If the accounts exists at both domains, follow the example Batch change passwords and add the DC name of both domains to the [Machines] section. This will set identical passwords for accounts in both domains.  
·If the accounts exists at one domain - change passwords at that domain and import the passwords when you create accounts at the other domain.  
·If the accounts do not exist anywhere - create accounts on both domains at the same time by adding the DC name of both domains to the [Machines] section.  

The big problem with having identical accounts at different domains is password synchronization - the users must be instructed/remember to always change passwords at all domains, if not, the old password will remain at one of the domains, and this will surely lead to confusion. One solution to this problem is to not let your users change password themselves (add the line "Account.Password.CannotChange=yes" to the script), but then you must take care of changing passwords for them regularly (easy to do with SetupBatcher).