Can the Generate password option be disabled? (NETIQKB3559)

goal
Can the Generate password option be disabled?

How do I disable the Generate Password option in DRA?

fact
Directory and Resource Administrator 6.50

fact
Directory and Resource Administrator 6.60

fact
Directory and Resource Administrator 7.x

fix
Directory and Resource Administrator version 6.50 and later can be configured such that the Generate Password option is not available to the Assistant Admins. To disable the Generate Password option, the following steps must be performed on the primary Directory and Resource Administrator server:

1. Launch Regedt32.
2. Highlight the SeverConfiguration key under HKEY_Local_Machine\Software\Mission Critical Software\OnePoint\Administration\Data\Modules hive.
3. Right-click the ServerConfiguration key and select New and String Value.
4. In the Value Name: field type NoMmcPwdGenerate and click OK.
5. Enter a value of 1 in the StringValue field and click OK.

To enable the Generate Password option after it has been disabled, change the string for NoMmcPwdGenerate value to 0.

Performing the steps above disables the Generate Password option in the Directory and Resource Administrator MMC console in version 6.50 and 6.60.  These steps also disables the Generate Password option in the Account and Resource Management and the Configuration and Delegation Management console in version 7.x.

note
This information will be replicated to all the Directory and Resource Administrator servers in the Multi-Master Set.

note

To disable the Generate Password (Suggest a password) option in the Directory and Resource Administrator Web Console, refer to the following Knowledge Base article:

NETIQKB36591: How do I disable the Generate Password option in the Web Console?

Formerly known as NETIQKB3559