Re: pwdump 2 & 3
From: Barrie Dempster (barrie_at_reboot-robot.net)
Date: 12/22/04
- Previous message: robert_at_dyadsecurity.com: "Re: Port Scanning."
- In reply to: Chris Buechler: "Re: pwdump 2 & 3"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: pen-test@securityfocus.com Date: Wed, 22 Dec 2004 10:34:44 +0000
On Thu, 2004-12-16 at 18:22 -0500, Chris Buechler wrote:
<snip>
> Also, FYI, you can set this domain-wide in group policy if you have
> Active Directory. Under Computer Configuration, Windows Settings,
> Local Policies, Security Options. "Interactive logon: Number of
> previous logons to cache (in case domain controller is not available)"
<snip>
Your laptops could be moved to a separate OU from your desktops (common
setup as GPO differs often between the two) then you could have all the
Desktop machines set to 0 and the laptops set to 1 - most laptops are
single user machines anyway.
This would give you the best of both, your laptop users would retain
their single profile and be able to access their machines whilst not
connected to the network and your Desktop machines wouldn't cache
credentials.
With Regards..
Barrie Dempster (zeedo) - Fortiter et Strenue
[ gpg --recv-keys --keyserver www.keyserver.net 0x96025FD0 ]
- application/pgp-signature attachment: This is a digitally signed message part
- Previous message: robert_at_dyadsecurity.com: "Re: Port Scanning."
- In reply to: Chris Buechler: "Re: pwdump 2 & 3"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
