Petri IT Knowledgebase Forums
 

Petri.co.il forums Home Forums Start Page Forums Frequently Asked Questions FAQ Member List Members List
Go Back   Petri IT Knowledgebase Forums > Server Operating Systems > Windows Server 2000 / 2003
Petri.co.il is happy to award auglan the title of Most Valuable Member !!!
Register Calendar Calendar Search Petri IT Knowledgebase Forums Search Todays Posts Today's Posts Mark Forums Read

Notices

Can you retrieve users passwords in Active Directory (Was:Active Directory)

Can you retrieve users passwords in Active Directory (Was:Active Directory)

this thread has 21 replies and has been viewed 36167 times

Closed Thread
 
Thread Tools Search this Thread Display Modes
  #1  
Old 29th January 2009, 07:45
kmrdurgesh kmrdurgesh is offline
Casual
Casual
 
 Join Date: Sep 2008
  6 month star 12 month star
 Posts: 6
 Reputation: kmrdurgesh is on a distinguished road (10)
Default Can you retrieve users passwords in Active Directory (Was:Active Directory)

How to check passwords of active directory user in server 2003.

Please suggest me.

Last edited by kmrdurgesh; 29th January 2009 at 08:05..
  #2  
Old 29th January 2009, 10:58
Stonelaughter's Avatar
MVM Stonelaughter Stonelaughter is offline
Senior Member
MVM
 
 Join Date: Sep 2004
  6 month star 12 month star
 Location: Nottingham UK
 Posts: 2,159
 Reputation: Stonelaughter is just really niceStonelaughter is just really niceStonelaughter is just really niceStonelaughter is just really niceStonelaughter is just really nice (405)
Default Re: Activedirectory

You mean you want to find out what their passwords ARE?

You can't. Forget it.
__________________


Tom
For my own and your protection, I do not provide support by private message under any circumstances. All such messages will be deleted and ignored.

Anything you say will be misquoted and used against you
  #3  
Old 29th January 2009, 11:16
Ossian Ossian is offline
Administrator
 
 Join Date: Nov 2003
  6 month star 12 month star
 Location: Bonnie Scotland
 Posts: 15,138
  Send a message via Skype™ to Ossian
 Reputation: Ossian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud ofOssian has much to be proud of (1300)
Default Re: Activedirectory

Phone user
Ask them what their password is
Log in using username and password
Get fired

There are tools that attempt to unhash passwords but they require access to the DC and time if the passwords are (as they should be) complex.

But the real question is WHY do you want to find out their password when, as a domain admin, you can reset it?

PS - please choose a better title for your thread!
__________________
Tom Jones
MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
PhD, MSc, FIAP, MIITT
IT Trainer / Consultant
Ossian Ltd
Scotland

** Remember to give credit where credit is due and leave reputation points where appropriate **
  #4  
Old 30th January 2009, 18:14
kmrdurgesh kmrdurgesh is offline
Casual
Casual
 
 Join Date: Sep 2008
  6 month star 12 month star
 Posts: 6
 Reputation: kmrdurgesh is on a distinguished road (10)
Default Re: Activedirectory

yes i want to retrive.
  #5  
Old 30th January 2009, 18:16
Dumber's Avatar
Dumber Dumber is offline
Moderator
 
 Join Date: Dec 2003
  6 month star 12 month star
 Location: The Netherlands
 Posts: 8,068
 Reputation: Dumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to behold (820)
Default Re: Activedirectory

Why do you need this????
__________________
Marcel
Netherlands
http://www.phetios.com
http://blog.nessus.nl

MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
No matter how secure, there is always the human factor.
  #6  
Old 30th January 2009, 18:39
Stonelaughter's Avatar
MVM Stonelaughter Stonelaughter is offline
Senior Member
MVM
 
 Join Date: Sep 2004
  6 month star 12 month star
 Location: Nottingham UK
 Posts: 2,159
 Reputation: Stonelaughter is just really niceStonelaughter is just really niceStonelaughter is just really niceStonelaughter is just really niceStonelaughter is just really nice (405)
Default Re: Activedirectory

Quote:
Originally Posted by kmrdurgesh View Post
yes i want to retrive.
As I said - forget it. It can be done but it's difficult, fiddly and costs your organisation time and money. Don't do it; either ask the user, reset the password, or if your reasons are not strictly within your company policy and the Law, LEAVE IT.
__________________


Tom
For my own and your protection, I do not provide support by private message under any circumstances. All such messages will be deleted and ignored.

Anything you say will be misquoted and used against you
  #7  
Old 30th January 2009, 21:16
Wired's Avatar
Wired Wired is offline
Administrator
 
 Join Date: May 2006
  6 month star 12 month star
 Posts: 3,169
 Reputation: Wired is just really niceWired is just really niceWired is just really niceWired is just really nice (384)
Default Re: Can you retrieve users passwords in Active Directory (Was:Active Directory)

Are you an Active Directory Administrator?
__________________
** Remember to give credit where credit is due and leave reputation points where appropriate **
  #8  
Old 7th February 2009, 17:46
gabi_cavaller gabi_cavaller is offline
Casual
Casual
 
 Join Date: Apr 2008
  6 month star 12 month star
 Posts: 55
 Reputation: gabi_cavaller is on a distinguished road (10)
Default Re: Can you retrieve users passwords in Active Directory (Was:Active Directory)

Sounds well dodgy.

As a system admin, I don't think I would ever want to.

The only thing I can think of is when a user has protected their .pst file and left the company.
  #9  
Old 7th February 2009, 21:55
Dumber's Avatar
Dumber Dumber is offline
Moderator
 
 Join Date: Dec 2003
  6 month star 12 month star
 Location: The Netherlands
 Posts: 8,068
 Reputation: Dumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to beholdDumber is a splendid one to behold (820)
Default Re: Can you retrieve users passwords in Active Directory (Was:Active Directory)

Still though the pst password isn't placed in AD and the user account is easily reset.
__________________
Marcel
Netherlands
http://www.phetios.com
http://blog.nessus.nl

MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
No matter how secure, there is always the human factor.
  #10  
Old 7th February 2009, 23:44
Garen Garen is offline
Users Awaiting Email Confirmation
Someone to look up to
 
 Join Date: Nov 2007
  6 month star 12 month star
 Posts: 751
 Reputation: Garen will become famous soon enoughGaren will become famous soon enough (147)
Default Re: Can you retrieve users passwords in Active Directory (Was:Active Directory)

Microsoft doesn't salt their hashes so if you grab some Rainbow Tables and a program like Cain & Abel it won't take long. You will still need Admin access to a DC though.
Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Moving an OU in Active Directory to another Active Directory infrastructure yeehaw Active Directory 3 9th December 2008 13:34
Users logged into Active Directory lhiatt Active Directory 4 7th October 2008 00:06
Active Directory Users list kumbharamol Active Directory 4 31st October 2007 19:32
Active Directory users Jimwes Active Directory 2 17th May 2007 17:05
Disable users in active directory ekrengel General Scripting 3 26th July 2006 00:22


All times are GMT +3. The time now is 07:58.

Steel Blue 3.5.4 vBulletin Style ©2006 vBEnhanced
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
 

Valid XHTML 1.0!   Valid CSS!

Copyright 2005 Daniel Petri