Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Focus on Microsoft
Disabling syskey on XP pro Sep 04 2006 06:12PM
Rocky (pixscreenpoint gmail com) (2 replies)
Re: Disabling syskey on XP pro Sep 06 2006 01:58AM
Denis Jedig (seclists syneticon de) (1 replies)
Re: Disabling syskey on XP pro Sep 06 2006 01:52PM
Eoin Miller (eoin miller trojanedbinaries com)
Denis Jedig wrote:
> Rocky wrote:
>
>> Hi List, one of my client forgot his syskey password, i tried
>> booting up on erd 2005 and run/update syskey.exe but it
>> did not help. Is there anyway to disable syskey from running
>> on startup or updating the syskey password?
>
> Since syskey is there to protect the user databases (SAM) by means of
> strong encryption (and the password is protecting the en-/decryption
> key BTW), your only way around this would be to try to bruteforce the
> password. You always could reset the SAM of course, but would loose
> any local accounts, groups and trusts.
> The ERD will only contain encrypted versions of your SAM BTW.
>
> Denis
>
The ntpasswd utility will blank out the SAM like it never existed.
However, once you choose to use this utility you can not re-enable the
syskey so it should only be used as a last resort.

http://home.eunet.no/pnordahl/ntpasswd/

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]
Share Permissions Sep 05 2006 02:38PM
Monrad DC forces gc ca (2 replies)
RE: Share Permissions Sep 06 2006 05:39AM
Aleksandr Sevostjanov (asevostjanov lb lt)
RE: Share Permissions Sep 05 2006 09:40PM
lists (lists startimeconsultants co uk)







 

Privacy Statement
Copyright 2009, SecurityFocus