Where are Windows "Enforce password history" passwords stored?

From: Charles Gillman (charles.gillman@gmail.com)
Date: Sun Aug 28 2005 - 21:13:43 EDT

• Next message: contact@webappsec.org: "WASC-Articles: 'Preventing Log Evasion in IIS'"
• Previous message: Tony: "Rolex Replicas!"
• Next in thread: Tony King: "RE: Where are Windows "Enforce password history" passwords stored?"
• Reply: Tony King: "RE: Where are Windows "Enforce password history" passwords stored?"
• Reply: Jeffrey Denton: "Re: Where are Windows "Enforce password history" passwords stored?"
• Reply: blanc: "Re: Where are Windows "Enforce password history" passwords stored?"
• Maybe reply: Soluk, Kirk: "RE: Where are Windows "Enforce password history" passwords stored?"
• Reply: Jean-Baptiste Marchand: "Re: Where are Windows "Enforce password history" passwords stored?"
• Reply: James Leighe: "Re: Where are Windows "Enforce password history" passwords stored?"
• Maybe reply: Wil.Allsopp@ins.com: "RE: Where are Windows "Enforce password history" passwords stored?"
• Reply: Steve A: "RE: Where are Windows "Enforce password history" passwords stored?"
• Maybe reply: totiebash@cox.net: "Re: Where are Windows "Enforce password history" passwords stored?"
• Maybe reply: Nick Duda: "RE: Where are Windows "Enforce password history" passwords stored?"
• Maybe reply: email@securityfocus.com: "Re: Where are Windows "Enforce password history" passwords stored?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Can anyone tell me where the "remembered" passwords are stored when
the "Enforce password history" is set in Group Policy?

If this setting is set to its maximum value of 24 then I would expect
24 password hashes are stored for each account for the setting to
work. But where?

More importantly are there any tools/techniques for accessing the
"remembered" passwords?

Thanks
CG

• Next message: contact@webappsec.org: "WASC-Articles: 'Preventing Log Evasion in IIS'"
• Previous message: Tony: "Rolex Replicas!"
• Next in thread: Tony King: "RE: Where are Windows "Enforce password history" passwords stored?"
• Reply: Tony King: "RE: Where are Windows "Enforce password history" passwords stored?"
• Reply: Jeffrey Denton: "Re: Where are Windows "Enforce password history" passwords stored?"
• Reply: blanc: "Re: Where are Windows "Enforce password history" passwords stored?"
• Maybe reply: Soluk, Kirk: "RE: Where are Windows "Enforce password history" passwords stored?"
• Reply: Jean-Baptiste Marchand: "Re: Where are Windows "Enforce password history" passwords stored?"
• Reply: James Leighe: "Re: Where are Windows "Enforce password history" passwords stored?"
• Maybe reply: Wil.Allsopp@ins.com: "RE: Where are Windows "Enforce password history" passwords stored?"
• Reply: Steve A: "RE: Where are Windows "Enforce password history" passwords stored?"
• Maybe reply: totiebash@cox.net: "Re: Where are Windows "Enforce password history" passwords stored?"
• Maybe reply: Nick Duda: "RE: Where are Windows "Enforce password history" passwords stored?"
• Maybe reply: email@securityfocus.com: "Re: Where are Windows "Enforce password history" passwords stored?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:47 EDT