Security Basics mailing list archives

Cached Password concern


From: "sunny budd" <sunnybudd () hotmail com>
Date: Mon, 01 Dec 2003 10:56:20 +0000

Hi all

I am working on a laptop users security policy and I have a concern about cached domain user credentials in Windows 2000 SP4 as We use our domain admin password to logon to laptops while they are being built. I would like to recommend against this practice but need some information on how easy it is to extract this stuff from a stolen laptop. I have heard that these passwords are protected by "syskey" and are impossible to extract. Is this true or does anyone know how to get at these passwords?

Thanks,
S

_________________________________________________________________
Find a cheaper internet access deal - choose one to suit you. http://www.msn.co.uk/internetaccess


---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: