Re: Active Directory Password Audit problem
- From: "Al Mulnick" <amulnick_No_SPAM@xxxxxxxxxxx>
- Date: Sat, 24 Jun 2006 11:23:05 -0400
Ok, what happens if you run it from another machine then? It really is not a
best practice to leave such tools on a DC, now is it?
Consider doing this off-line as well. I assume there are tools that let you
have at a security db off-line somewhere on the net. But as I said before,
it's not something that I'm going to discuss any more than the obvious in a
public forum. Your best bet is going to be to contact the vendors of those
products and ask how they suggest you implement them for your purpose.
Al
"Daniel the Security Guy" <DanieltheSecurityGuy@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote in message news:617B3007-C968-4D69-B207-9C05002A9A65@xxxxxxxxxxxxxxxx
The problem isnt with the client machines but the actual domain
controller.
I run all these utilities straight from the Domain controller and
regardless
of the product it will freeze. It is not specific to any one domain
controller since the freeze occurs on any of them when the tools are run.
"Al Mulnick" wrote:
Sounds like you found out your answer then, right?
Maybe not. Unfortunately, a public forum is not the place to talk about
such things. You might have better look having a look at forums for
those
specific products vs. checking in an AD environment. Can't think of a
reason the machines would freeze as that would be a DoS situation, but
you
may have other things loaded on the machines as well. Try repeating the
task with a test machine that's out of the box neutral and see if you get
the same results.
"Daniel the Security Guy"
<DanieltheSecurityGuy@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote in message
news:FF2CF8C8-AEE4-4F2E-B638-26C3082A5DCC@xxxxxxxxxxxxxxxx
Last year we upgraded to 2003 Active Directory. We once a year do a
password
audit to ensure all passwords are not easily cracked. After the
upgrade
last
year we are unable to perform a password audit without the Server
freezing
up. We have used Lopht, pwdump, anfrd a few others and the same result
happens. The audit is being done with a Domain Admin account. We have
tried
on 3 different AD servers that should contain the password files.
Anyone
ever experienced this or got some suggestions that may help me out?
.
- References:
- Re: Active Directory Password Audit problem
- From: Al Mulnick
- Re: Active Directory Password Audit problem
- Prev by Date: Re: Changing ADAM user password
- Next by Date: Re: Active Directory Password Audit problem
- Previous by thread: Re: Active Directory Password Audit problem
- Next by thread: Re: Active Directory Password Audit problem
- Index(es):
Relevant Pages
|
