Re: Audit AD passwords



"exchangerookie1994" <exchangerookie1994@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:D13CC1B8-148E-42FD-A214-1F48FC7DB58A@xxxxxxxxxxxxxxxx
I have been tasked with auditing active directory for weak passwords. Is
there a utlility that can either scan for weak passwords on live AD and give
a report who has weak passwords, or mount and scan offline copy of ad
database and report on weak passwords. Everything that I have found on net
deals only with sam files for local accounts

Try Proactive Password Auditor:

http://www.elcomsoft.com/ppa.html

It works with live AD only (extracting password hashes from memory -- of the local
or remote computer, just supplying domain administrator credentials).

--
Sincerely yours,
Vladimir

Vladimir Katalov
CEO
ElcomSoft Co.Ltd.
mailto:vkatalov@xxxxxxxxxxxxx
http://www.elcomsoft.com

.



Relevant Pages

  • Password Tool?
    ... Is there a tool that can scan all for weak passwords in a ... domain and create a report to show the users by name? ... will begin preforming a new password policy and would like ... to show to administration where we currently stand. ...
    (microsoft.public.security)
  • [opensuse] mounting anomaly
    ... For those of you who recall my router and 10.0 system being hacked into some ... time ago (root logins enabled via ssh; weak passwords all around,) which I ... won't mount normally... ...
    (SuSE)