On 2006-05-25 feedb4ck (at) z4ck (dot) org [email concealed] wrote:
> Although it is a well known fact that Windows desktops and servers
> still use LM Hashes and cache the last ten userids and passwords
> locally, just in-case an Active Directory, Domain, or NDS tree are not
> available, has anyone thought about the consequences of this issue in
> a hot-desking, or flexible working environment?
That's why you use policies to disable use of LM hashes and caching of
passwords in environments like that.
Regards
Ansgar Wiechers
--
"Der Computer ist da, um zu rechnen, nicht um Ausreden wie 'Kann nicht
durch Null teilen' auf den Bildschirm zu schreiben."
--Marco Haschka in de.org.ccc
> Although it is a well known fact that Windows desktops and servers
> still use LM Hashes and cache the last ten userids and passwords
> locally, just in-case an Active Directory, Domain, or NDS tree are not
> available, has anyone thought about the consequences of this issue in
> a hot-desking, or flexible working environment?
That's why you use policies to disable use of LM hashes and caching of
passwords in environments like that.
Regards
Ansgar Wiechers
--
"Der Computer ist da, um zu rechnen, nicht um Ausreden wie 'Kann nicht
durch Null teilen' auf den Bildschirm zu schreiben."
--Marco Haschka in de.org.ccc
[ reply ]