Re: Offline NT Password & Registry Editor

From: Harald Bilke (maps.hb_at_lanplus.de.on)
Date: 07/23/03 

Date: Wed, 23 Jul 2003 13:47:58 +0200

Hi/2

On Wed, 23 Jul 2003 07:26:44 -0400, "Brendon Rogers"
<brendon@nospam-itology.net> wrote:

>There is no security when a user has physcial access to the machine
>(obviously less of a problem for servers and a huge problem for desktops /
>laptops). Prevent user-access or boot access to the floppy drive and CD-ROM.
>
>This utility also can only modify the password of a local account on that
>machine - ie stored in the local SAM. It cannot be used to reset a domain
>password.

but if run on the PDC - what is "local" then?

>
>Other utilities such as l0phtcrack have been able to pull NT passwords from
>the SAM for years.
>
>"Tomas" <tomas.legat@sh.se> wrote in message
>news:0a7501c350f9$ca476060$a301280a@phx.gbl...
>> Hi!
>>
>> One of my co-workers came to me with this little nifty
>> program, which can reset or change a password on a local
>> account within minutes.
>> My general wondering is, do Microsoft know about this, and
>> are they doing something about it?
>>
>> If you want to check it out, here's the link to the page,
>> and form your own opinion.
>>
>> http://home.eunet.no/~pnordahl/ntpasswd/
>>
>> I think Microsoft should adress this pretty fast, since
>> this program makes it virtually pointless to use, and come
>> up with good passwords.
>>
>> Regards
>> /Tomas
>

Relevant Pages

  • Re: Offline NT Password & Registry Editor
    ... There is no security when a user has physcial access to the machine ... machine - ie stored in the local SAM. ... It cannot be used to reset a domain ... > I think Microsoft should adress this pretty fast, ...
    (microsoft.public.win2000.security)
  • RE: Help... Event ID: 13042 "Self Update Not Working"
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... account or for the IUSR_ComputerName account are not synchronized with ... reset the passwords for the IUSR and the IWAM ...
    (microsoft.public.windows.server.sbs)
  • Re: User password change causes all cached profile passwords to be bla
    ... when they open MS Outlook and attempt to get their email they are ... is changed (not reset), it should handle the change without any problems. ... Microsoft MVP - Directory Services ... Instead of the website you're using, I suggest to use OEx (Outlook Express ...
    (microsoft.public.windows.server.active_directory)
  • Re: Administrator unable to reset user pw
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... <Subject: Re: Administrator unable to reset user pw ...
    (microsoft.public.windows.server.sbs)
  • Re: Administrator unable to reset user pw
    ... You may be prompted to enter the old password when you try to reset the ... please don't hesitate to post in our newsgroup. ... Microsoft CSS Online Newsgroup Support ... newsgroups so that they can be resolved in an efficient and timely manner. ...
    (microsoft.public.windows.server.sbs)
Quantcast