Windows Forum

Ask something
Discussion Locked

Domain Users trying to Capture Passwords

0 helpful
11 replies

by aspiring_one

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

How can I prevent domain users from trying to capture network passwords by monitoring Challenge/Response activity across our Windows NT 4.0 network?

They are installing sniffer programs on their workstations and monitoring traffic that goes across the network and stealing administrative login information that way.

11 replies

by sgibbs

I'm pretty sure installing service pack 5 or later takes care of programs like Lophtcrack etc. What would be more in line w/ that sort of activity is to fire the users who do this.

by ntoz

See Q239869 basicaly you need to enable NTLM2 that significantly improves both the authentication and session security mechanisms.

by beeba

Uh, fire them?

Seriously, I wouldn't put up with this!

There's also intel & 3com cards which do encryption on the fly.

Having a switched network may foil some of their attempts too.

by bearded_wonder

Something else you should consider-
Implement Syskey (see MS article Q143175) to secure your SAM from attempts to crack your password database.
Good Luck.

This discussion is closed to new replies.