| Author |
Message |
MLaurent
Guest
|
 Posted:
Sat Feb 12, 2005 4:11 am Post subject:
extract windows 2003 account passwords |
|
|
Hello,
for LDAP project : how can i get windows 2003 server accounts passwords (or
the MD5 hashes? )
Thanx and sorry for my poor english |
|
| Back to top |
|
 |
Ulf B. Simon-Weidner [MVP
Guest
|
| Posted:
Sat Feb 12, 2005 5:53 am Post subject:
Re: extract windows 2003 account passwords |
|
|
"MLaurent" <cpaslebon@norealmail.com> wrote in message
news:cpaslebon@norealmail.com:
| Quote: | Hello,
for LDAP project : how can i get windows 2003 server accounts passwords
(or
the MD5 hashes? )
Thanx and sorry for my poor english
|
Hello Mlaurent,
You can't - the password is not readable.
The two major workarounds are
- There are directory synchronisation products out there which require
that the change of the password is made with a customized dialog - they
either exchange the default dialog or require the user to change the
password on a web page. Then they are populating the password in Active
Directory (and the other directories where you want it).
- Use the Microsoft Identity Management Server (MIIS) with SP1 - it's
able to catch the password right away when it's changed, and pushes it
into the connected (LDAP or whatever you like) directories.
--
Gruesse - Sincerely,
Ulf B. Simon-Weidner
MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz
Weblog: http://msmvps.org/UlfBSimonWeidner
WebSite: http://www.windowsserverfaq.org |
|
| Back to top |
|
|
TCH
Guest
|
| Posted:
Sun Feb 13, 2005 3:20 pm Post subject:
Re: extract windows 2003 account passwords |
|
|
thanx for your response.
| Quote: | - There are directory synchronisation products out there which require
that the change of the password is made with a customized dialog - they
either exchange the default dialog or require the user to change the
password on a web page. Then they are populating the password in Active
Directory (and the other directories where you want it).
|
Could you give me some name of these synchronisation products ?
I learned also that it was possible with windows 2000 server to modify
directly Active Directory passwords with LDAP commands under a SSL
connection : if this possible again with Windows 2003 server ?
If positive response, where can i find the active directory schema (in
order to know AD attributes) ?
Thx
"Ulf B. Simon-Weidner [MVP]" <nospam2-ulf@usw-consulting.com> wrote in
message news:%23mnBXTJEFHA.3944@tk2msftngp13.phx.gbl...
| Quote: | "MLaurent" <cpaslebon@norealmail.com> wrote in message
news:cpaslebon@norealmail.com:
Hello,
for LDAP project : how can i get windows 2003 server accounts passwords
(or
the MD5 hashes? )
Thanx and sorry for my poor english
Hello Mlaurent,
You can't - the password is not readable.
The two major workarounds are
- There are directory synchronisation products out there which require
that the change of the password is made with a customized dialog - they
either exchange the default dialog or require the user to change the
password on a web page. Then they are populating the password in Active
Directory (and the other directories where you want it).
- Use the Microsoft Identity Management Server (MIIS) with SP1 - it's
able to catch the password right away when it's changed, and pushes it
into the connected (LDAP or whatever you like) directories.
--
Gruesse - Sincerely,
Ulf B. Simon-Weidner
MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz
Weblog: http://msmvps.org/UlfBSimonWeidner
WebSite: http://www.windowsserverfaq.org |
|
|
| Back to top |
|
|
Ulf B. Simon-Weidner [MVP
Guest
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in