Setting Store password using reversible encryption per user object

Question

Hello, I am curious if anyone knows which setting takes precedence in the following scenario.

The default domain policy has "Store passwords using reversible encryption" set as disabled and an individual object has it enabled in the Account options.

Will reversible encryption be applied to the user object, or will it have to be excluded from the policy?

We need to use CHAP for authentication, hence the requirement for reversible encryption.

Thanks!

Answer 1

Hi,

If there is a conflict between the Group Policy setting and the individual setting, the Group Policy setting takes precedence. In your case "Store passwords using reversible encryption" has to be set as enabled in the group policy.

Best Regards,

Ian Xue

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.