Re: How to access LOCAL Users and Groups on a Windows 2003 DC?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: ptwilliams (ptw2001_at_hotmail.com)
Date: 02/15/05 

Date: Tue, 15 Feb 2005 07:19:16 -0000

When you upgrade to a DC the SAM is upgraded/ converted in the instance that
there are no other DCs for this domain, or discarded if there are. The only
SAM that remains is a tiny cut down version that is used when logging on in
an offline state, i.e. Directory Services Restore Mode.

Any user accounts created on a DC are domain accounts. Local accounts are
only available on non-DCs, whereby the machine still has it's local SAM.

Why do you think you need to access the local groups?

Perhaps if you explain your issue we can help you... 

-- 
Paul Williams
http://www.msresource.net/
http://forums.msresource.net/
"Bill Nguyen" <billn_nospam_please@jaco.com> wrote in message 
news:u5XbjauEFHA.3928@TK2MSFTNGP15.phx.gbl...
I need to access local users/groups on a Win2003 DC machine. I login as
domainname\adminsitrator and found local users/groups not available. I was
able to see it on a member Win2003.
Please help!
Thanks
Bill

Relevant Pages

  • Re: Windows 98 Hack
    ... A skilled hacker would have taken the SAM and ... cracked and used the passwords without locking out the accounts. ... successfully get the SAM, or they did get the SAM and they locked out the ... > machines were doing the logon attempts. ...
    (microsoft.public.security)
  • Re: Local Group Policy
    ... > administrator name and password if I am a member of that group? ... > Likewise why can't I log on locally using a domain user name and password? ... in the local SAM. ... So, no Accounts local accounts are published to the AD, nor AD acounts ...
    (microsoft.public.windows.group_policy)
  • Re: SAM cracking
    ... It seems they love to boot from cd or from another partition, copy the SAM file and crack within a few minutes with rainbow tables for example. ... Set a password in the BIOS that must be entered before booting the operating system. ... Set strong passwords on all accounts, ... you can set user permissions/restrictions with Group Policy but be careful. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Windows 98 Hack
    ... A skilled hacker would have taken the SAM and ... > cracked and used the passwords without locking out the accounts. ... > successfully get the SAM, or they did get the SAM and they locked out the ... > know the login IDs on your network. ...
    (microsoft.public.security)
  • RE: Authentification from a SAM base
    ... What accountare you having the users use to logon in with? ... "Mika" wrote: ... But what you mean by "create accounts in the locla SAM"? ...
    (microsoft.public.scripting.vbscript)