SecurityFocus

Discovering Active Direcory users with blank passwords Apr 02 2007 04:43PM
igor mamuzic koncar-inem hr (5 replies)

Discovering Active Direcory shared or Service users account Apr 03 2007 02:25PM
Biassoni Riccardo (r biassoni reply it) (3 replies)

Re: Discovering Active Direcory shared or Service users account Apr 04 2007 12:59PM
Chris Costantino (clckct yahoo com)

RE: Discovering Active Direcory shared or Service users account Apr 03 2007 05:53PM
Talkovic, Scott A. (satalkov uci edu) (1 replies)

RE: Discovering Active Direcory shared or Service users account Apr 08 2007 02:00AM
David LeBlanc (dleblanc mindspring com)

Re: Discovering Active Direcory shared or Service users account Apr 03 2007 03:18PM
James (njan) Eaton-Lee (james mailing gmail com)

RE: Discovering Active Direcory users with blank passwords Apr 03 2007 02:04PM
Goran Pizent (goran pizent mobilnet hr)

RE: Discovering Active Direcory users with blank passwords Apr 02 2007 07:55PM
Kunz, Jeffrey T. (JKunz foley com) (1 replies)

Re: Discovering Active Direcory users with blank passwords Apr 03 2007 12:03AM
Kevin Gay (rot_betruger sbcglobal net) (2 replies)

Re: Discovering Active Direcory users with blank passwords Apr 03 2007 02:17PM
Raoul Armfield (armfield amnh org)

Kevin Gay wrote:
> Turn on password length of 6 and see who complains :P, that is if there
> is some ethical problem with cracking the sam file, but I do have to
> question why its not set to begin with.

The problem with this method is that the password length check does not
happen unless they change their passwords. So unless you are suggesting
to set password length to at least 6 characters and set all the accounts
to change password at next logon (impractical) This will not work.

>> -----Original Message-----
>> From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]]
>> On Behalf Of igor.mamuzic (at) koncar-inem (dot) hr [email concealed]
>> Sent: Monday, April 02, 2007 11:43 AM
>> To: focus-ms (at) securityfocus (dot) com [email concealed]
>> Subject: Discovering Active Direcory users with blank passwords
>>
>> Is there a way to discover Active Directory users with blank passwords
>> if I have domain admin privileges and local access to my domain
>> controllers?
>>

--
Raoul Armfield
rarmfield at amnh dot org

[ reply ]

Re: Discovering Active Direcory users with blank passwords Apr 03 2007 02:01PM
pimp mastermind (gbchustla gmail com)

RE: Discovering Active Direcory users with blank passwords Apr 02 2007 07:51PM
eric (eric ch13-12westtex org)

Re: Discovering Active Direcory users with blank passwords Apr 02 2007 06:46PM
c0d3w12 c0d3w12 (c0d3vv12 gmail com)