Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [domain-controller]

The tag has no usage guidance.

0
votes
1answer
57 views

Excessive logons from domain controllers

I am quite new to analyzing the windows logs. I have been seeing excessive logons with 4624 and 4625 with the Subject/account name: DomainController(actual name of the domaincontroller is different) ...
0
votes
0answers
19 views

Login to domain user account (previously logon) using compromised local administrator account? [duplicate]

Is it possible to use a compromised local administrator account to login to a previously logged on domain user account? Using Mimikatz, I've dumped the MsCacheV2 hashes, but they seem to be ...
1
vote
0answers
130 views

Attack secure domain controller in environment with unique username/password combinations [closed]

I’ve already obtained local administrator on a domain user’s computer. Now, my target is one of the company’s domain controllers. However, the domain controllers run no vulnerable services, and every ...
0
votes
1answer
506 views

Password reset for AD RODC-specific krbtgt_xxxxx accounts

While there's a lot of information [1], [2], [3] about resetting the password for the regular krbtgt account, but I haven't yet found a clear suggestion about RODC-specific krbtgt_xxxxx accounts. ...
5
votes
2answers
183 views

Is there a more secure way for users to log into the domain other than just passwords?

Say you have this: An NPS server that grants access to users using client certificates (EAP-TLS). So for example someone managed to snatch the domain administrator's password and they log in to the ...
5
votes
0answers
57 views

DSquery leaking personal infomation

Today I found DSquery on one of my smb shares at work. I ran it to query users and since my company uses IC numbers as the unique CN, I got to see all my colleagues' ICs. Firstly, is this considered ...
0
votes
1answer
93 views

Viewing local users on a workstation when I'm SYSTEM on Forest PDC

I'm doing some exercises on a challenge lab. I'm SYSTEM on the Forest PDC. I need to figure out the SID of a local user on a machine in another domain in the forest. I can get there with PTH and run ...
2
votes
1answer
161 views

How to safely extract hashes from domain controller for auditing?

I am looking for either tools or method that will extract the hashes and store them securely so that they can be placed onto a dedicated cracking station. Obviously, they need to be transmitted and ...
3
votes
0answers
37 views

Centerized authentication/Monitoring for network [closed]

I am looking for an open source solution to authenticate the machines before they use the network services (internet/local lan/smb etc). Currently I am using MS Domain Environment . but DC does not ...
1
vote
1answer
395 views

A few files on a domain controller were encrypted - how could that have happened?

I've just realized that the policies on one of our Windows domain have been failing. I've traced the problem and it turned out the INI files were encrypted by Globe ransomware (or one of its variants)...
5
votes
1answer
3k views

How does UNC path hardening and SMB signing work under the hood?

With a lot of unpatched versions of Windows in an Active Directory domain, one can man-in-the-middle a client when it connects to the domain controller and inject a group policy that gives an attacker ...
8
votes
1answer
4k views

Impersonating a computer in a Windows domain

I've been trying to wrap my head around how computers are identified and granted access to a Windows domain. More specifically, I've been asking myself if whatever mechanism is involved really ...
6
votes
1answer
173 views

Can windows domains be faked?

Without the equipment and software (and knowledge yet) readily available to test myself, I've been wondering about the relationship between computers and domains in a Windows environment. Some ...
5
votes
1answer
425 views

How to implement a password change policy when user's centralized password is in a lot of places?

I would like to implement password changing in an organization but they have the domain controller/LDAP passwords "all over the place". They have the passwords in a lot of places, for example, in ...