All Questions
10 questions
0
votes
1
answer
859
views
How is a Windows Active Directory Machine Account Password stored in Windows/Samba Clients?
It's said that a Windows Machine Account Password is usually composed of 120 characters in UTF-16-LE format. But when looking at the value stored in the Windows Registry under HKLM\SECURITY\Policy\...
- 101
0
votes
1
answer
795
views
Hacked list of AD logins and passwords
An organization my friend works for was recently hacked, and the hackers published a file with over 100,000 names and passwords, including theirs. An IT person in the organization told me that the ...
- 101
0
votes
0
answers
451
views
What are security risks of a domain user accounts with denied interactive logon?
When I create domain user account with denied interactive logon, what are real security risks when hacker gets the password?
http://paulasitblog.blogspot.com/2017/01/deny-interactive-logon-for-service....
1
vote
1
answer
287
views
Why do administrators create passwords vulnerable to kerberoasting? [closed]
I was researching a kerberoasting attack on the Active Directory domain. To create the stand, I used a Domain Controller on Windows Server 2016 and one client machine on Windows 10. SQL Server was ...
- 13
6
votes
1
answer
2k
views
Are passwords for Windows accounts always stored in cleartext in memory, while the account is logged on?
Are passwords for Windows accounts always stored in cleartext in memory, while the account is logged on?
Using Mimikatz I've seen lots of examples where passwords are stored in memory, either for ...
- 1,297
7
votes
2
answers
24k
views
Recover the password of a Windows service user login account
When setting up a Windows service, one specifies a user account to use for authentication, as well as the password for that user. In their guidelines for user account selection, Microsoft states that ...
- 173
2
votes
1
answer
7k
views
Can I prevent Active Directory from accepting common passwords? [closed]
Active Directory's complexity requirements are rudimentary and I suspect this specific part of Windows security hasn't been improved in a decade or more.
Is there a built-in or 3rd party tool ...
- 153
66
votes
1
answer
8k
views
What's the risk if I accidently type my password into a username field (Windows logon)?
I'm used to logging into my personal Mac which is a password-only field (like waking from sleep mode). Sometimes I have to use a Windows network on which I have an account, but of course I have to ...
- 3,282
5
votes
2
answers
2k
views
Password History/Password policy
I'm referring to "remembered" password that the domain keeps so a user cannot reuse that password until it has expired in what was set at Password Policy on DC (W2003/W2008).
Where is password ...
- 161
5
votes
3
answers
638
views
How can I detect users that have requested AD Administrators to reuse an expired password?
There is a trend among companies I've worked at where administrators (or helpdesk folks) give a user a courtesy extension of the old expired password... rather than forcing the user to change it.
...
- 51.1k