Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Microsoft
[Top] [All Lists]

RE: Windows 2000 Administrator lockout

Subject: RE: Windows 2000 Administrator lockout
Date: Mon, 16 Aug 2004 11:53:14 -0400
Hi Robert:

I know this is probably what you don't want to hear but, I would format the
box.
Other then that you can try to crack the SAM file for admin passwords, which
is time consuming.

There is nothing better then a nice clean format, especially that you just
inherited a foreign box,
and you know things are out of date on it. Might as well go for the format.

Just my 2cents.
Good Luck-

DS




-----Original Message-----
From: Robert Ritchey [mailto:rritchey@eods.com] 
Sent: Friday, August 13, 2004 5:56 PM
To: focus-ms@securityfocus.com
Subject: Windows 2000 Administrator lockout


Hello All,

The network that I have is rather small.  1 server, and 4 workstations. I
inherited the systems.  There has been no administrator working there for a
little over a year.  What administrator that was there, was very much
non-technical.

When the network was built whoever built the server installed everything
they possibly could.  This system now how few main functions:  
1. File server 
2. Internet Gateway
3. Symantec Virus manager

Nobody knows any of the passwords for anything on the system.  Any of the
passwords that are in use are not allowed administrator access.  I do mean
for anything!  I can't even get Symantec to update virus signatures, as I do
not have a password to do the update with.  The signature is like 2003 date.


It is just very frustrating!  

I am looking for options, before I have to go and reformat and rebuild. This
would in some ways make life simpler, there are wrinkles in that all of
there operational data and other services are on the server.  We are
currently moving foreword with a plan to rebuild.  This will happen; I would
rather pick the time to do it.  Rather than have it forced on me. 

Does anyone know of any other way to take control of this machine and
network.

Thanks for your time and any ideas will be appreciated.

Robert Ritchey


---------------------------------------------------------------------------
---------------------------------------------------------------------------


---------------------------------------------------------------------------
---------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>