RE: windows domain question

From: Mike Coppins (mike@legolas.com)
Date: 04/19/02 

Date: Fri, 19 Apr 2002 17:48:17 +0100
To: focus-ms@securityfocus.com
From: Mike Coppins <mike@legolas.com>

At 19/04/2002 17:14, Dubber, Drew B wrote:
>Mike
>
>You could check it out reasonably easy. Schedule an AT job on the
>workstation to gain a Command Prompt in the SYSTEM context and then run
>REGEDIT from that prompt to open the local registry under the SYSTEM
>context. Search for the relevant domain SID or name. Check out the SAM key
>especially. But I would be surprised if NT *didnt* hold some information,
>especially in its backup registry files and last known good config
>sub-sections. This is before we even start looking at the file system :)

I'll try this as a final check if I do try the whole exercise of the
testing (see my last email that I've just sent a couple of minutes ago).

>Regards
>Drew
>Drew.Dubber@eds.comx (remove x - dull I know)

By the way, hitting reply to you gives your normal email address :) 

-- 
Mike Coppins
mike@legolas.com
http://www.legolas.com/
Currently looking for work: http://www.legolas.com/mikes/cv.html