XADM: Exchange 2000 Setup Stores Password in Clear Text in Unattend File (304702)

The information in this article applies to:

Microsoft Exchange 2000 Server

This article was previously published under Q304702

SYMPTOMS

If the Microsoft Windows autologon option is enabled on the Windows 2000 Server-based computer, when you use the optional Exchange 2000 Server Setup.exe /createunattend file_name.ini switch for automated installation, the user password may be stored in clear text in the resulting .ini file. This problem also occurs if you run the Exchange 2000 Service Pack 1 (SP1) Update.exe /createunattend file_name command.

WORKAROUND

To work around this problem, disable the autologon option, and then run the Exchange 2000 Setup.exe /createunattend command to create the .ini file.

STATUS

Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server.

MORE INFORMATION

The autologon option is off by default. If you enable this option and an Exchange 2000 unattend file is created, the password is stored in the [Global Properties] section of the .ini file. The line reads:

gfn_pid core password=password

For additional information about the Windows autologon option, click the article number below to view the article in the Microsoft Knowledge Base:

310584 How to Enable Automatic Logon in Windows

Modification Type:	Minor	Last Reviewed:	4/28/2005
Keywords:	kbbug kbnofix KB304702