Troubleshooting Guide › Creating Policies and Access Authorities › Windows Administrators Can Change CA Access Control Passwords

Previous Topic: Cannot Add User as Password Manager to Only One Group

Next Topic: Global Password Policies Lock Users Out of Protected Systems

Windows Administrators Can Change CA Access Control Passwords

Valid on Windows

Symptom:

Windows administrators can change CA Access Control passwords in my CA Access Control-protected Windows environment.

Solution:

To help ensure that only users that you specify in CA Access Control can change CA Access Control passwords, set the value of the EnforceViaeTrust registry entry to 1 in the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\AccessControl\passwd

This registry entry specifies to enforce that you can update or create user passwords through CA Access Control only. The default value of the registry entry is 0, meaning that you do not have to use CA Access Control to update or change a user password.

More information:

passwd