Enable rolling of expiring NTLM secrets during sign in, for users who are required to use Microsoft Passport or smart card for interactive sign on" can be activated.
Posted by vane1978@reddit | sysadmin | View on Reddit | 3 comments
Hi,
By enabling "rolling of expiring NTLM secrets during sign on, for users who are required to use Microsoft Passport or smart card for interactive sign on" in our Windows 2016 domain.
I know this policy affects users who have **Smart card is required for interactive logon** checked.
But what about users who are set up with Windows Hello for Business but do **NOT** have the "Smart card is required for interactive logon" box checked? They just have the standard password policy. Are they going to be affected by this NTLM secrets rolling as well?
3 Comments
SteveSyfuhs@reddit
dimx_00@reddit
vane1978@reddit (OP)