OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Deon Grobler (deonbluewave.com)
Date: Thu Jul 05 2001 - 03:50:14 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hiya all

    Thanks for all your suggestions, but the machine was so locked down, that
    none of that worked. So what I did was a fresh install of NT in a new winnt
    directory, booted up in that, deleted the old sam database, booted into the
    orginal version, and hey, all had to do was press enter and everything was
    back to normal.

    Whats really scarey is that its THAT easy to compromise a box!

    Thanks for all your suggestions!

    Deon

    -----Original Message-----
    From: Fab [mailto:fsicilianoearthlink.net]
    Sent: Wednesday, July 04, 2001 7:11 PM
    To: deonbluewave.com; FOCUS-MSsecurityfocus.com
    Subject: Re: lost NT password

    You can try this link:
    http://www.esiea.fr/public_html/Christophe.GRENIER/index.html?nt.html
    What you need to do, I'm sure there are other ways, but one way of
    recovering the password is to boot the machine with a linux floppy, then
    from there, you can dump the sam, and try and crack the passwd. That link
    should help you out.

    -Fab

    At 12:00 PM 7/4/01 +0100, Deon Grobler wrote:
    >Hiya
    >
    >This has probably been discussed before, but I please need an urgent
    answer.
    >One of our finance servers local NT password was changed and now we cannot
    >find it. It also does not permit interactive local logon. Is there any
    >other way I can get into this machine?
    >
    >NT 4.0 SP 6a
    >
    >Thanks
    >
    >Deon Grobler - Senoir Systems Engineer
    >deonbluewave.com
    >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    >Bluewave Ltd - Online Creations
    >http://www.bluewave.com
    >Tel. +44 (0)207 706 3500
    >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~