Re: Encrypted password in script

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Everybody,

Thank you all for replying to my posting. You have given me some very
usefull hints in how to go about this problem. The next couple of days I will
investigate what will work best in my situation. I anticipate that I will use
a combination of solutions, like storing the script in a location that only
one Service Account can access, together with an encryption method.

Again, many thanks. This really is a great group :-)

Regards,

Richard


"TDM" wrote:


"Richard Waal" <RichardWaal@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:823A41FE-D3A0-46B6-B724-2933E76EADCD@xxxxxxxxxxxxxxxx
Hello all,

I am writing a script which will change the password of the local
administrator account on client computers. My concern is that people will be
able to determine the password by simply opening the script file. I looked at
the possibility to encode the script through the Microsoft encode utility,
but a quick search on Google made me realise that this is a very poor way of
securing passwords.

I am looking for a way, maybe through the use of an external command-line
tool, which enables me to encode the password using some sort of algorithm.
Or, maybe there is another way in which I can change the password, without
users being able to retrieve it.

Does anybody have any suggestion?

Many thanks.

--
Richard

Richard,

Why cant you use the built in XP File Encryption to encrypt
the file you are reading the PW from ? No one will be able to open the file
except for the owner, period. Works great for the most part, but,
any user will be able to see the file in the filesystem, they just cant
open it.

Just in case you are not aware of how to encrypt a file, from Explorer,
right click on the file, go to properties, click the advanced button, then
check the box for "Encrypt contents to secure data".

My disclaimer, I dont have a Win2003 server to test this on right now,
and it is possible, but unlikely, that this feature only exists on XP Pro.

TDM



.

Relevant Pages

  • Re: Encrypted password in script
    ... I am writing a script which will change the password of the local ... the possibility to encode the script through the Microsoft encode utility, ... Why cant you use the built in XP File Encryption to encrypt ... Just in case you are not aware of how to encrypt a file, from Explorer, ...
    (microsoft.public.scripting.wsh)
  • Re: Encrypt Statrup Script Password Using Group Policy
    ... If the script is .vbe they can run it as if they copied it locally and it will do what the script was meant to do, in your case, change the admin password A normal user with no admin rights, I think may not be able to run it. ... If you find a 3rd party app, let me know, thanks. ... I would too be interesting in any 3rd party software that would fully encode ... > the scripting tools cannot encrypt or mask the password. ...
    (microsoft.public.windows.group_policy)
  • RE: Changing local admin PW using vb logon script - can it be encrypted?
    ... If you really want to get carried away encrypt the password in the registry, but the code to decrypt must be added to the script. ... Subject: Re: Changing local admin PW using vb logon script - can it be encrypted? ...
    (Focus-Microsoft)
  • Re: An Honest and Simple Question.
    ... encrypt anything that the user wishes to encrypt. ... cipher takes a fixed quantity of bits in input and returns a the same ... printable characters. ... which is a method to encode readable plaintext into ...
    (sci.crypt)
  • Command line input and validation - Bourne shell
    ... Write a Bourne shell script called caesar.sh to encrypt plaintext into ... The Caesar cipher is based on a cyclic ... We only encrypt the alphabetical characters. ... If there is only one command line parameter, ...
    (comp.unix.shell)