Re: can my domain administrators see what i have typed

Tech-Archive recommends: Fix windows errors by optimizing your registry



They already know my domain accounts password. What i affraid of is, they
may steal my hotmail, bank or other account/passwords.

"Joe Richards [MVP]" <humorexpress@xxxxxxxxxxx> wrote in message
news:eoFzCTNTFHA.3840@xxxxxxxxxxxxxxxxxxxxxxx
> They don't really need to see what you type if they want your password and
> the own the domain.
>
> First option is that they can dump the password hash and brute force your
> password which could take milliseconds or hours or ? depending on how
> smart the admins are and how good your password is. Look up Project
> RainbowCrack, the precomputed hash tables make easy work of many password
> hashes.
>
> The second option is that the put a password filter in place and catch it
> in clear text the next time you change your password.
>
> The third option is to set up a web site that you go to that only accepts
> basic auth of your domain ID and then they just dump out the password
> variable or pull it out of the header.
>
> joe
>
> --
> Joe Richards Microsoft MVP Windows Server Directory Services
> www.joeware.net
>
>
> Hope Paka wrote:
>> I am on a domain and log in to a server on the domain. I wonder, if
>> the admins of the domain can see what i have typed when i logged in to
>> the domain. For example, can they see my passwords.
>> I know third party tools catch your type. Do windows server 2003 have
>> this capability.
>>

.