![]() |
|
|
|||||||
| Petri.co.il is happy to award auglan the title of Most Valuable Member !!! |
| Register | Calendar |
Search |
Today's Posts |
Mark Forums Read |
| Notices |
|
|
Can you retrieve users passwords in Active Directory (Was:Active Directory)this thread has 21 replies and has been viewed 36167 times
|
![]() |
|
|
Thread Tools | Search this Thread | Display Modes |
|
#1
|
||||||||
|
||||||||
|
How to check passwords of active directory user in server 2003.
Please suggest me. Last edited by kmrdurgesh; 29th January 2009 at 08:05.. |
|
#2
|
||||||||||
|
||||||||||
|
You mean you want to find out what their passwords ARE?
You can't. Forget it.
__________________
Tom For my own and your protection, I do not provide support by private message under any circumstances. All such messages will be deleted and ignored. Anything you say will be misquoted and used against you |
|
#3
|
||||||||||
|
||||||||||
|
Phone user
Ask them what their password is Log in using username and password Get fired There are tools that attempt to unhash passwords but they require access to the DC and time if the passwords are (as they should be) complex. But the real question is WHY do you want to find out their password when, as a domain admin, you can reset it? PS - please choose a better title for your thread!
__________________
Tom Jones MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+ PhD, MSc, FIAP, MIITT IT Trainer / Consultant Ossian Ltd Scotland ** Remember to give credit where credit is due and leave reputation points where appropriate ** |
|
#4
|
||||||||
|
||||||||
|
yes i want to retrive.
|
|
#5
|
||||||||||
|
||||||||||
|
Why do you need this????
__________________
Marcel Netherlands http://www.phetios.com http://blog.nessus.nl MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE No matter how secure, there is always the human factor. |
|
#6
|
||||||||||
|
||||||||||
|
As I said - forget it. It can be done but it's difficult, fiddly and costs your organisation time and money. Don't do it; either ask the user, reset the password, or if your reasons are not strictly within your company policy and the Law, LEAVE IT.
__________________
Tom For my own and your protection, I do not provide support by private message under any circumstances. All such messages will be deleted and ignored. Anything you say will be misquoted and used against you |
|
#7
|
|||||||||
|
|||||||||
|
Are you an Active Directory Administrator?
__________________
** Remember to give credit where credit is due and leave reputation points where appropriate ** |
|
#8
|
||||||||
|
||||||||
|
Sounds well dodgy.
As a system admin, I don't think I would ever want to. The only thing I can think of is when a user has protected their .pst file and left the company. |
|
#9
|
||||||||||
|
||||||||||
|
Still though the pst password isn't placed in AD and the user account is easily reset.
__________________
Marcel Netherlands http://www.phetios.com http://blog.nessus.nl MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE No matter how secure, there is always the human factor. |
|
#10
|
||||||||
|
||||||||
|
Microsoft doesn't salt their hashes so if you grab some Rainbow Tables and a program like Cain & Abel it won't take long. You will still need Admin access to a DC though.
|
![]() |
| Thread Tools | Search this Thread |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Moving an OU in Active Directory to another Active Directory infrastructure | yeehaw | Active Directory | 3 | 9th December 2008 13:34 |
| Users logged into Active Directory | lhiatt | Active Directory | 4 | 7th October 2008 00:06 |
| Active Directory Users list | kumbharamol | Active Directory | 4 | 31st October 2007 19:32 |
| Active Directory users | Jimwes | Active Directory | 2 | 17th May 2007 17:05 |
| Disable users in active directory | ekrengel | General Scripting | 3 | 26th July 2006 00:22 |