Re: can my domain administrators see what i have typed
- From: "Joe Richards [MVP]" <humorexpress@xxxxxxxxxxx>
- Date: Mon, 02 May 2005 10:20:09 -0400
Well you can definitely make sure this can't happen.
1. Make sure your personal passwords are different from your work passwords. 2. Don't do personal stuff from work.
It is almost certain that whatever you are doing that is personal is done through a web proxy and they have access to all web traffic when they want it. Alternatively, the PCs are their's and they have the option to dig out any info out of them they want to or monitor them in any way they want to.
This is very easy for you to control.
joe
-- Joe Richards Microsoft MVP Windows Server Directory Services www.joeware.net
Hope Paka wrote:
They already know my domain accounts password. What i affraid of is, they may steal my hotmail, bank or other account/passwords.
"Joe Richards [MVP]" <humorexpress@xxxxxxxxxxx> wrote in message news:eoFzCTNTFHA.3840@xxxxxxxxxxxxxxxxxxxxxxx
They don't really need to see what you type if they want your password and the own the domain.
First option is that they can dump the password hash and brute force your password which could take milliseconds or hours or ? depending on how smart the admins are and how good your password is. Look up Project RainbowCrack, the precomputed hash tables make easy work of many password hashes.
The second option is that the put a password filter in place and catch it in clear text the next time you change your password.
The third option is to set up a web site that you go to that only accepts basic auth of your domain ID and then they just dump out the password variable or pull it out of the header.
joe
-- Joe Richards Microsoft MVP Windows Server Directory Services www.joeware.net
Hope Paka wrote:
I am on a domain and log in to a server on the domain. I wonder, if the admins of the domain can see what i have typed when i logged in to the domain. For example, can they see my passwords.
I know third party tools catch your type. Do windows server 2003 have this capability.
.
- Follow-Ups:
- Re: can my domain administrators see what i have typed
- From: Dmitri Gavrilov [MSFT]
- Re: can my domain administrators see what i have typed
- References:
- Re: can my domain administrators see what i have typed
- From: Hope Paka
- Re: can my domain administrators see what i have typed
- Prev by Date: Issue while creating child dmain
- Next by Date: RE: Corrupt AD Database
- Previous by thread: Re: can my domain administrators see what i have typed
- Next by thread: Re: can my domain administrators see what i have typed
- Index(es):
Relevant Pages
|