disabled but pwnotreq accounts were being allowed login access, i don't

think this should be allowed.  disabled is disabled, end of story.

diff --git a/source/netlogond/srv_netlogon_nt.c b/source/netlogond/srv_netlogon_nt.c
index 37ebd73b08f9b8efdb49ed82460c30d7b23777cc..6bd028baf4ff3995d245fae2a9ab74235b1dd32f 100644 (file)
--- a/source/netlogond/srv_netlogon_nt.c
+++ b/source/netlogond/srv_netlogon_nt.c
@@ -930,8 +930,7 @@ uint32 _net_sam_logon(const DOM_SAM_INFO *sam_id,
        }
        
        acb_info = ctr.info.id21->acb_info;
-       if (IS_BITS_SET_ALL(acb_info, ACB_DISABLED) &&
-           IS_BITS_CLR_ALL(acb_info, ACB_PWNOTREQ))
+       if (IS_BITS_SET_ALL(acb_info, ACB_DISABLED))
        {
                return NT_STATUS_ACCOUNT_DISABLED;
        }