AFAIK it's irreversible. The one way hashing encryption algorithms are "one
way", precisely to prevent password decryption.
However there're some tools around the net that can successfully reset the
passwords and/or SAM, after booting the system from a floppy, even if your
filesystem is NTFS.
Look into the "passware suite". It's a "swiss army knife" for account and
password recovery.

Regards,
Alex

> -----Original Message-----
> From: Anzaldo, Oscar [mailto:Oscar.Anzaldo (at) xerox (dot) com [email concealed]]
> Sent: 08 February 2005 23:11
> To: focus-ms (at) securityfocus (dot) com [email concealed]
> Subject: SAM encripted with syskey
>
> Hi list,
>
> Does anyone knows a way to disable syskey encryption or a way to
> retrieve the password for a SAM encripted with syskey?
>
> Regards
>
>
> ------------------------------------------------------------------------
--
> -
> ------------------------------------------------------------------------
--
> -

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]