Active directory password recovery

[Evo410]

Hi all,

I have a bit of a dilema, I am trying to recover and migrate some usernames/passwords from an existing active directory on windows 2003 server that need transfering over to another server not running active directory, it appears nobody has any records of the passwords as they were set up a long time ago. I am abit confused as to where Active Directory passwords are stored as I assume the SAM database in /system32/config just stores the local accounts. I have had success in the past exporting the MD5 password hashes from a non active directory server using pdwump, however this relied on the lsass.exe process running which doesnt appear to be running on the current windows 2003 server here. I cannot use the AD migration tool from microsoft as the server we are transfering to is NOT a domain controller. Any ideas on how I can do this?

Many thanks

 

[itsp1965]

You can't just transfer AD domain accounts to a member server and expect it to work (ids/passwords are stored in a different database than the old NT domain method). If you need to copy user account names, why don't you export the accounts and modify the export file to include new passwords and then import into the new member server