Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Microsoft
[Top] [All Lists]

RE: Help needed

Subject: RE: Help needed
Date: Mon, 7 Aug 2006 07:22:36 -0700
Until they invent the ITVP (Intention Transfer and Validation Protocol),
I have to assume that a given request is valid unless and until it
contains enough internal inconsistencies to be fairly obvious. Goodness
knows I've certainly sent out my share of queries over the years that,
looking back on them after all was said and done, could have been (and
may very well have been) thought of as dodgy.

--
Devin L. Ganger                    Email: deving@3sharp.com
3Sharp LLC                         Phone: 425.882.1032
15311 NE 90th Street                Cell: 425.239.2575
Redmond, WA  98052                   Fax: 425.702.8455
(e)Mail Insecurity: http://blogs.3sharp.com/blog/deving/

-----Original Message-----
From: Andrew Harvey [mailto:andrew@mootpointer.com] 
Sent: Monday, August 07, 2006 6:26 AM
To: focus-ms@securityfocus.com
Subject: Re: Help needed
Importance: High

Michael,

Assuming this isn't a domain level account (and is just a nice local  
account), then a tool like ntpasswd will do you nicely for resetting  
the password. If you have another account with admin access on the  
box, then you can reset the password that way as well.

If it's a domain level account, and you have another domain admin,  
the solution is similarly simple, just reset the password in Active  
Directory.

As for your .pst file, I'm pretty sure it lives in the Local Settings  
folder in your profile folder, wherever that is on your setup (my  
only experience is with roaming profiles, so I'm not much help to you  
there).

To the rest of the list:
Doesn't this smell like a social engineering attempt to you? I'm not  
saying it is, and I do not mean to offend Michael, but my mind  
instantly jumped to social engineering. "How do I recover my  
password" is often "How do I crack someone else's password". I  
suppose if we're just looking for .pst files, it's harmless enough,  
and seems fairly legitimate, but there is something at the back of my  
mind saying "wait a moment".

Just my thoughts,
Andrew


On 06/08/2006, at 10:56 AM, Michael Mooney wrote:

Hi All.
Hope that someone can save me some time and reduce some stress.

A friend of mine changed their Administrator password and then  
forgot what
it was.
They called Dell for an assist and Dell suggested they create  
another user
account with admin privileges.
That worked fine and they were able to get into the system.
HOWEVER,  when they tried accessing Outlook, all the email was gone  
as well
as the address book.
They've checked the directories and done searches (.pab and .pst)  
and all
without success.

Any assistance would be most deeply appreciated.




----------------------------------------------------------------------

-----
----------------------------------------------------------------------

-----



------------------------------------------------------------------------
---
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
---------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>