General discussion


Access domain control database

By etrottie ·
Is there a way to access the domain control database data for reporting and user access control?

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by Joseph Moore In reply to Access domain control dat ...

Yeah, quite a few ways. I will assume you want to know about NT4 domain, since this is in the NT section.
There are tools in the Windows Resource Kit that can export user info.
You can just do a NET USER command against a username on a domain to get info, user group membership, etc.
There are 3rd party tools (like my favorite, Dameware NT Utilities) that can query and export info.
There are also lots of shareware/freeware tools that can get all kinds of info (a couple I like are WINFO, and NBTENUM).
It really depends on what you want to get, and if you have PERMISSION to do this. Security in NT4 is lax, so by default, an anonymous connection to a NT4 domain controller can download just about the entire SAM (except for the password hashes). So, there are ways to tighten the security to prevent this (or at least make it harder to do!).
What exactly are you looking to do, and why?

Collapse -

by Joseph Moore In reply to

Ok, then use Dameware NT Utilities:

It has an Export function that will export the entire SAM contents except for password. REally cool! I've used it for 3 years now. Good thing to have.

Collapse -

by etrottie In reply to Access domain control dat ...

I need to export the group/user data from the NT 4.0 domain controller to a spreadsheet to track changes.

Related Discussions

Related Forums