Picture this scenario: You have a domain joined web server where you have an IIS hosted site that runs under the application pool identity. This application pool identity uses the machine account security principal. When you run "nltest.exe /sc_change_pwd:domainname" to change the machine password...