使用活动目录登录名登录到域计算机？ [英] Login to domain computer using active directory logon name?

问题描述

我有一个案例，我只能使用活动目录登录名登录计算机。用户将在Windows的主登录界面上仅输入活动目录登录名，然后单击确定按钮，然后域计算机应从AD获取密码并自动登录到计算机。

请帮助我这个。



我尝试了什么：



i改变了一些注册表用于实现我上面提到但没有任何作用的值和组策略。

I have a case where i have to login to the computer using active directory logon name only. The user will enter only active directory logon name on the main login screen of windows and click on OK button then the domain computer should fetch the password from AD and login to the computer automatically.
Please help me regarding this.

What I have tried:

i have changed some registry values and group policy for achieving what i have mentioned above but nothing works.

推荐答案

你想要做的事情是不可能的。 Active Directory不存储密码;它存储密码哈希值。没有办法检索密码，并且无法使用密码哈希登录。



即使有可能，这也是一个主要的安全指出，安全风险。您可能也没有任何用户帐户密码！

What you're trying to do is not possible. Active Directory doesn't store the passwords; it stores password hashes. There is no way to retrieve the password, and there is no way to log in with just the password hash.

Even if it was possible, this would be a major security risk, as Ryan pointed out. You might as well not have any passwords on your user accounts!

这篇关于使用活动目录登录名登录到域计算机？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！