Re: No LM Hash - no really

From: Miha Pihler (mihap-news_at_atlantis.si)
Date: 08/22/04


Date: Sun, 22 Aug 2004 10:12:27 +0200

Hi Ian,

I have dumped some information on this URL... Can you check this and compare
to your results.

http://freeweb.siol.net/mpihler/hashes.jpg

One way to also test your environment is to create password that is longer
then 14 characters (15 will be fine). In this case password can not be
stored as LM "Hash" due to LM design.

Next thing to check would be did your client get new policy. At what level
did you set it? Domain, OU, ... ?

I have few passwords to reset now :-)

Mike

"Ian Boyd" <admin@SWIFTPA.NET> wrote in message
news:uhOpyr%23hEHA.3548@TK2MSFTNGP09.phx.gbl...
> The machine has been rebooted - several times.
>
> "Ian Boyd" <admin@SWIFTPA.NET> wrote in message
> news:%23gQTDq%23hEHA.3348@TK2MSFTNGP12.phx.gbl...
> > How do you REALLY disable the generation of Lan Manager password hashes.
> >
> > i have set the group policy on the domain controller (Windows 2000), and
> > added to the domain controller's registry the NoLMHash = 1 DWORD.
> >
> > Then i go to a workstation and reset the password of my domain account.
> >
> > i can then go back to the domain controller, dump the AD password
hashes.
> i
> > then crack it and confirm that the LM Hash exists, and contains my new
> > password.
> >
> >
> > So how does one REALLY disable LM Hashes in an Active Directory
> environment?
> >
> >
>
>



Relevant Pages

  • Re: system monitoring
    ... , then isolated environment works. ... it will not hash out and even using a plaintext input to Microsoft ... The solution would be to have a database of hashes of files of interest. ...
    (microsoft.public.win32.programmer.kernel)
  • Re: hash referrences and such
    ... try to test every condition going INTO the hash (or hashes) before ... to assign undefined values into a hash, ... What I've been trying to do is place the object into a hash and then iterate ... unless ($environment) { ...
    (perl.beginners)
  • Re: Typical HashTable Collisions Handling
    ... How you implement your hash table is like how you implement your ...     return hashCode; ... collisions (in a typical environment). ... I find an enormous number of collisions. ...
    (comp.programming)
  • Re: Problem with newly defined counter
    ... This, however, resets the myexample counter to zero whenever I start ... The definition of \usecounter contains directives for resetting the ... environment has the counter reset to 0. ...
    (comp.text.tex)
  • Re: Problem with hash tables: gethash does not return values
    ... I have a problem with a hash table in my program. ... (fill-hash-table (parameters environment) ... Same-name symbols from two different packages would be different keys ...
    (comp.lang.lisp)