Re: Syskey prevents dumping of SAM or Active Directory

From: Christoph Kaminski (chriz@gmx.net)
Date: 08/14/02 

From: "Christoph Kaminski" <chriz@gmx.net>
Date: Wed, 14 Aug 2002 16:46:02 +0200

Syskey is still no perfect protection, since by default the syskey is stored
on disk and can be recovered. Only syskeys stored on floppy disk or entered
on system boot provide reasonable secure protection.

"Ritchie" <fqplkweyugujqwf456@hotmail.com> schrieb im Newsbeitrag
news:ajdoje$1b3ebk$1@ID-156657.news.dfncis.de...
> Hi All,
> Would I be correct in saying the following? :-
>
> If you don't have administrative access to a W2K machine, you could still
dump the
> SAM or AD database, but it wouldn't be much use to an attacker because the
data has
> been encrypted by Syskey and therefore running it through a PW cracker
would be a
> waste of time. Unlike NT4 (pre-syskey) where it was possible to boot from
a floppy,
> copy the SAM and then crack the passwords.
>
> --
> Ritchie
> Undo address for mail
>
>

Relevant Pages

  • Re: Syskey prevents dumping of SAM or Active Directory
    ... but with a syskey stored on disk ... > other methods can still be installed and run locally to obtain the SAM. ... Only syskeys stored on floppy disk or ...
    (microsoft.public.win2000.security)
  • Re: Syskey prevents dumping of SAM or Active Directory
    ... other methods can still be installed and run locally to obtain the SAM. ... believe this works no matter which syskey method is selected. ... Only syskeys stored on floppy disk or ... > on system boot provide reasonable secure protection. ...
    (microsoft.public.win2000.security)
  • Re: Syskey prevents dumping of SAM or Active Directory
    ... It is a question of how much security you need. ... Syskey with keys stored in ... Only syskeys stored on floppy disk or ... >> on system boot provide reasonable secure protection. ...
    (microsoft.public.win2000.security)
  • SYSKEY on USB Drive
    ... Can anyone help me with a link or some advice of how to use an USB ... drive instead of a floppy disk when working with SYSKEY. ...
    (microsoft.public.security)
  • Re: Syskey prevents dumping of SAM or Active Directory
    ... > Syskey is still no perfect protection, since by default the syskey is stored ... Only syskeys stored on floppy disk or entered ... ready for cracking for the situations when one has also managed to obtain the ...
    (microsoft.public.win2000.security)