View user password in AD

[timbo343]

Hey

 

Is there a way to view the users password that is stored in AD?

 

T

[ChrisH]

No not without cracking it etc etc. So just take it as a no .

[timbo343]

oh ok, not to worry

[StewartKnight]

You cannot access the SAM file whilst the server is running. If you boot into DOS you can perform all manner of wonders!!!

[Joedetic]

Out of curiosity, why would you need to do that anyway?

[Geoff]

Auditing password security.

[Joedetic]

I would have thought GPOs were less effort.

[Geoff]

One must be able to prove that the policies are being followed. It is not sufficient just to set them and forget about it.

 

Although to be fair, in a school enviroment you'd probably never be asked to do this. Most likely because you don't have an audit department.

[Joedetic]

Very true

[localzuk]

Isn't running your own dictionary attack against the accounts enough?

[Geoff]

The auditing you'd have to perform would be dictated by a combination of your audit and password policys.