OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Roxas, Ryan (ryan.roxasmpaa.org)
Date: Thu Oct 04 2001 - 12:50:22 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    You can use l0phtcrack to extract the SAM database from the NT server to another machine and run the password crack.

    http://www.atstake.com/research/lc3/index.html is the link....

    Best Regards,
    Ryan Roxas

    -----Original Message-----
    From: Martin L. Drury Jr. [mailto:mdruryads-corp.com]
    Sent: Thursday, October 04, 2001 10:05 AM
    To: focus-mssecurityfocus.com
    Subject: Retrieving NT 4 Administrator password

    Hello all,
            First, if this is not the appropriate place for this, my apologies.

            I'm in need of a little bit of help. Roughly 4 years ago, while working for a non-profit community network, I set up an NT 4.0 based LAN (no internet access) for a Library. There were two accounts that had Administrative access, mine, and the Administrator. Under normal operations, no one was ever logged into the server, and the accounts used by the workstations did not have administrative access.

            Now, 4 years later, they needed to update some software that is installed on the server, and apparently no one remembers the Administrator account password (they said they had it written down, but apparently they didn't, all they managed to do was lock themselves out of the account). I have long since forgotten the password I used (given enough tries, I'm sure I could remember it, but well, I don't want to lock out my account as well). Is there an easy way to retrieve/reset the administrator password without damaging the data stored on the server?

            I believe at most the machine has SP3 installed on it. The copy of NT was installed off of a Back Office CD, but I don't recall whether or not it had Service Packs or not. All the information I had concerning the machine was given to the non-profit when I left there 3 years ago, and since then, they have conviently lost it. Any pointers anyone could give me on what steps I need to take would be greatly appreciated. Thanks in advance,

    Martin L. Drury Jr.
    Advance Data Systems, Inc.
    502-228-3396 x117
    mdruryads-corp.com