Re: user default password checking tool



Josh's suggestion is good for you to note when creating "future" AD accounts.

For your immediate need, that is, determining whether "current" AD
users have changed their password from the default 'name123' you have
a few options. I've used the following in the past and ran these
scripts on one of the DCs. Of course, you'll need to decide what
impact/risks are involved with running it, when to run it, etc. but
they're minimal and shouldn't impact performance too much because
they're just reads. It obviously depends on your network, # of
accounts to scan, etc.

Here are the links:

http://www.microsoft.com/technet/scriptcenter/resources/qanda/jul05/hey0705.mspx
http://www.rlmueller.net/PwdLastChanged.htm

Wordsmith the scripts from the sites above and run a few tests to get
the results you want e.g. you may want to do only 10 reads.

Good luck and let us know how it goes.

Cheers!
Alexander

On 9/22/06, Josh Parker <josh.g.parker@xxxxxxxxx> wrote:
If you are in an Windows 2003/2000 domain enviroment, you can simply
setup option on the acount to Force a user to change there password
upon the next login. To keep the user from using the same password,
you can set Password History to remember the last password, (the last
3 passwords is a good recomendation) You can also set it to require
complex passwords when they change there password. You can also set
the password age, so they have to change it after a sertain amount of
days.

Hope that helps

JOsh

On 9/14/06, vijay shetti <vijay.shetti@xxxxxxxxx> wrote:
> hello all!!
>
> In my company when we create a new user he is given an initial
> password.But then he is told to change the password.The password is
> initial of the employee name followed by 123..
> for vijay shetti it willl be vs123...
>
> We have a domain based environment.I want to check now how many users
> have not changed their initial password using some tool that gives me
> list of usernames whose password has 123 in the end.
>
>
> We follow the same procedure for creating outlook mail password.If
> there is any tool/script that also helps me find out this then it will
> greatly help me.
>
>
> Waiting for your reply,
> Pavan.
>
> ---------------------------------------------------------------------------
> This list is sponsored by: Norwich University
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The NSA has designated Norwich University a center of Academic Excellence
> in Information Security. Our program offers unparalleled Infosec management
> education and the case study affords you unmatched consulting experience.
> Using interactive e-Learning technology, you can earn this esteemed degree,
> without disrupting your career or home life.
>
> http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------------
>
>

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------




--
DISCLAIMER
This message contains confidential information and is intended only
for the individual named. If you are not the named addressee you
should not disseminate, distribute or copy this e-mail. Please notify
the sender immediately by e-mail if you have received this e-mail by
mistake and delete this e-mail from your system.

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------



Relevant Pages

  • Re: user default password checking tool
    ... Nice script idea but one question, if you choosed to block the account ... >>> The NSA has designated Norwich University a center of Academic ... >>> in Information Security. ... Our program offers unparalleled Infosec ...
    (Security-Basics)
  • RE: Verifying E-Mail Addresses
    ... correspondence with the sender upon realizing your own ignorance, ... Original> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... Original> The NSA has designated Norwich University a center of Academic ... Original> in Information Security. ...
    (Security-Basics)
  • Re: Re: nmap -sS SYN-SCAN does not find all open Ports?
    ... VMWare sometimes acts unpredictably with network tools. ... > The NSA has designated Norwich University a center of Academic Excellence ... > in Information Security. ... > without disrupting your career or home life. ...
    (Security-Basics)
  • Re: lock down personal Win XP workstation
    ... How secure depends on what programs and versions you are currently using as well as what ports and applications you have running. ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic ... The NSA has designated Norwich University a center of Academic Excellence in Information Security. ...
    (Security-Basics)
  • Re: The VA Stolen Laptop - Lessons Learned
    ... TrueCrypt is NOT a Full Disc Encryption utility. ... >>> The NSA has designated Norwich University a center of Academic ... >>> Excellence in Information Security. ... >>> disrupting your career or home life. ...
    (Security-Basics)