Home/ Questions/Q 913001
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-15T17:28:49+00:00

My question is how ADSI performs SetPassword operation. According to what I have read

  • 0

My question is how ADSI performs SetPassword operation. According to what I have read ADSI is a COM interface and it has more capabilities than AD provides through LDAP. While you are suppose to update unicodePwd attribute of a personaccount entity through LDAP, ADSI provides you SetPassword call. I know that ADSI & AD provides Kerberos during authentication. So how the password is transmitted to server when SetPassword is called? Is it raw binary unencrypted data? Or does Kerberos comes into play at this call?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Firstly, SetPassword tries ldap over ssl. then kerberos, and then NetUserSetInfo. So, as far as I can tell, in all cases it is secure on the wire. But it is also quite slow.

    This is NOT the case in Adam – it uses cleartext passwords. Beware of wrappers that talk to Adam instead of ‘proper’ AD.

    A faster way is to use IDirectoryObject and set the unicodePwd attribute through this. Because this can only be done with a secure bind to AD, the password is protected.

    • 0