Discussion Locked

Exract user passwords

0 helpful
15 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Is there a program to expract user names with passwords from either Novell 6 or Microsoft Server 2003?

15 replies

by sprocket

as I require a list of passwords to change user settings through the company, and asking all the users will take to long.

by sprocket

sorry, but do you know what changes I wish to make. I require access to a number of users accounts. If I reset all their passwords then the phone will ring non stop and Ill have users moaning, which I dont want.

But if you want to know, one program I need to install saves a few small files into their account for security reasons. So the admin account is useless.

by tony hopkinson

as an admin you should be able to store the files in their account profile.
If the app needs to be installed as them then just email 'em and get them to install it.
You should be able to script something to take the pain out of it for them.

They'll moan a lot more if they find out you've been logging on as them, and rightly as well.
An auditor would go absolutley ballistic, if they found out you'd set something up like this as well. After all it's meant to be impossible.

by sprocket

I think I am going to go smash my head against a brick wall.

I cant believe people are being so unhelpful and telling me what I need or dont need. In this case I can only do this by logging on as the users. Our company policy clearly states this to users so there is no problem.

Just take my word for it, I can only do this by logging on as the user.

by jdmercha

If your compant policy sates this, then just have everyone email their passwaord to you.

If you are trying to install software on their computer, then you should not need their network password. You should only need their Windows password.

Then again, why can't you automate the process. Write a script so the software is automatically installed the next time they log in.

by sprocket

Q)"If your compant policy sates this, then just have everyone email their passwaord to you."
A) I would do but users take a long time and its the users that are away that are the problem.

Q)"If you are trying to install software on their computer, then you should not need their network password. You should only need their Windows password."
A) ok we only use network accounts and I need their full network access for links and network files.

Q)Then again, why can't you automate the process. Write a script so the software is automatically installed the next time they log in.
A) I cant, otherwise I would and then I wouldnt have posted this question.

I know people are tring to help, in the most unhelpful way, but please, unless you can actually help exptract user passwords from active directory, then please dont post.
There really must be a way while logged on to 2003 as the administrator to pull out passwords and user names. Microsoft cant have plugged all the holes.

by ctmoore1998

Install VNC on all the workstations. Set the password so that only IT knows what it is. You can then install whatever software you want via the user's logon by taking over the workstation with VNC. Get SecureVNC and it will even blank the local display so that the user can't see any confidential info. Another benny of VNC is that you can use it for day to day support also. We use it at many locations and it is a great time saver.

by sprocket

We already use VNC for support. But it doesnt work when the PC is switched of or the user is away and hasnt logged in.

by sbostedor1

You can download a tool called Bozteck VNCScan and it will deploy UltraVNC. This is relevant because UltraVNC has a few key security features that normal VNC does not.

There is a video and a few documents at http://www.vncscan.com/vs/support.htm that shows how to depply UltraVNC with encryption and Windows login authentication.

UltraVNC can also blank the local display and it's performance is much better than SecureVNC.

by foxy1968

The answer is maybe. It depends on the GPO. If they are saved in a reversable encryption format it is possible (but this totally violates best practices and opens the end user to identity theft), but if the passwords have not been saved in a reversible encryption format as set out by the GPO then NO YOU CAN'T.

And if you can't repackage or script an install of this app to run at login you shouldn't have the keys to the site.

by jtakiwi

You can pull the user passwords out of the hashed password (assuming your domain policy is set to the default, and assuming you have domain admin rights) Lophtcrack or similar programs will read the hashed (cached) user passwords. One method you might try, reset all user passwords to a simple, yet hard to guess password, then tell all users they need to logon w/ this "new" password and then reset their passwords.

This discussion is closed to new replies.