Re: secure storage in Active Directory

From: Michael Howard [MSFT] (mikehow_at_online.microsoft.com)
Date: 05/05/03 

Date: Sun, 4 May 2003 20:28:58 -0700

by default, AD does not store user account passwords - it stores a hash of
the password. 

-- 
Cheers, Michael
Writing Securce Code 2nd Edition
(http://www.microsoft.com/MSPress/books/5957.asp)
This posting is provided "AS IS" with no warranties, and confers no rights.
OR if you wish to include a script sample in your post please add "Use of
included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm"
"megan" <zhongmeiyi@yahoo.com.sg> wrote in message
news:57257a88.0305041854.13e0f162@posting.google.com...
> Hi,
>
> I understand that the Active Directory stores user data and passwords.
> How does it store these securely within its internal structure?
> i.e. how are the passwords protected? Through hashing? PKI?
>
> I've read that the Active Directory database is the ntds.dit, but
> I've yet to read anywhere that the passwords are stored there. I've
> also read about the NTLM (mostly for backward compatibility with NT
> systems), they store the password hash (either NTLM hash or NTLMv2 hash).
>
> Thanks in advance for any feedback.
> Megan

Relevant Pages

  • Re: Decrypt
    ... that you store the encrypted passwords on the server. ... In fact, don't just hash the passwords, but combine the password ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Hacked Passwords
    ... a null hash starting with the AAD3 characters. ... store the older LM Hash format. ... passwords on pieces of paper. ...
    (microsoft.public.security)
  • Re: Is it necessary to store the entire MD5, etc. hash for validation?
    ... >I want to store the last 10 passwords used on a legacy database that, ... but I don't have room to store 10x128+ bytes. ... I think you are mistaken about the size of the output of hash functions, ... passphrase hashes if you use SHA-256, ...
    (sci.crypt)
  • Re: secure storage in Active Directory
    ... AD does not store user account passwords - it stores a hash of ... > I understand that the Active Directory stores user data and passwords. ... > How does it store these securely within its internal structure? ... they store the password hash. ...
    (microsoft.public.security)
  • Re: Windows Authentication (asp.net 1.1 C#)
    ... it is up to you how you store your passwords - FormsAuth is just a mechanism ... Usually you store the passwords in a database using salted hashes - have a look at PasswordDeriveBytes class ... Authentication or Form Authentication. ...
    (microsoft.public.dotnet.framework.aspnet.security)