XADM: Exchange 2000 Setup Stores Password in Clear Text in Unattend File

View products that this article applies to.

This article was previously published under Q304702

Symptoms

If the Microsoft Windows autologon option is enabled on the Windows 2000 Server-based computer, when you use the optional Exchange 2000 Server Setup.exe /createunattend file_name.ini switch for automated installation, the user password may be stored in clear text in the resulting .ini file. This problem also occurs if you run the Exchange 2000 Service Pack 1 (SP1) Update.exe /createunattend file_name command.

↑ Back to the top

Workaround

To work around this problem, disable the autologon option, and then run the Exchange 2000 Setup.exe /createunattend command to create the .ini file.

↑ Back to the top

Status

Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server.

↑ Back to the top

More information

The autologon option is off by default. If you enable this option and an Exchange 2000 unattend file is created, the password is stored in the [Global Properties] section of the .ini file. The line reads:

gfn_pid core password=password

For additional information about the Windows autologon option, click the article number below to view the article in the Microsoft Knowledge Base:

310584� How to Enable Automatic Logon in Windows

↑ Back to the top