Overview#

Some detailed information on Active Directory and Passwords

Microsoft Active Directory uses the UnicodePwd instead of the more common userPassword unless you have Enable UserPassword in Microsoft Active Directory.

Setting and Changing Microsoft Active Directory Passwords#

Some details on Setting and Changing Microsoft Active Directory Passwords.

AD Password Filters[1]#

Password filters provide a way for you to implement password policy and change notification. Passfilt.dll is Microsoft's implementation of a password filter.

Windows Default Password Policy#

A default password filter ships with Windows Default Password Policy.

Some Active Directory and Passwords Examples#

"Password Hook" is a Window Password Filter DLL that sends any Windows password changes to a script/program, stored in the registry by a configuration utility. The DLL is effectively a generic windows password filter.

The Active Directory SHA-1 hex password filter|http://code.google.com/p/sha1hexfltr/] is a password filter stores that password in SHA-1 hash in an attribute in Microsoft Active Directory. (Link no longer available)

DirXML Password Flow From Active Directory to eDirectory#

We describe the DirXML Password Flow From Active Directory to eDirectory along with some troubleshooting tips.

A different Approach#

SUN/Oracle came up with a different method to allow password synchronization with Active Directions that they call, On-Demand Password Synchronization.

Enable UserPassword in Microsoft Active Directory #

How to Enable UserPassword in Microsoft Active Directory instead of UnicodePwd.

How passwords are used in Windows#

How passwords are used in Windows

More Information#

There might be more information for this subject on one of the following:

• Microsoft Active Directory
• Passfilt.dll
• Password Flow From Active Directory to eDirectory
• Password Management
• Passwords

---

• [#1] - Password Filters - based on information obtained 2016-01-02-