I am a network administrator and I

[mcsefinally]

I am a network administrator and I need to know if there are any third party products that will help me decode a password that someone has mailisciously put on my network???

Any help would be appreciated>>>.MCSE FINALLY

 

[mot98]

Need more info then that. What type of password are you talking about?? A logon password, document password??
mot98..

"Where's the beer?"

 

[mcsefinally]

thanks- someone has created 2 users accounts and placed them in our administrative group and we were hoping to decode them and see if they were the same password- to verify that the same person created them

 

[malakisi]

If I were the admin I wouldn't worry about what the password says. Someone, you don't know who, placed them there. Delete them out and fix your security.

I know this doesn't help the situation, Just my two cents.

 

[ensorg]

Try this link

http://www.nmrc.org/faqs/nt/nt_sec03.html

It’s a lot of hassle to go to to just to find out two passwords, which won't really verify anything.

Sounds like your users have more rights than they need

 

[mcsefinally]

Right- I agree. But someone used this account to crash the system and we are trying to track who created the account or some how isolate - we have narrowed it one individual and now just trying to collect concrete information. We had never had a problem until now.

This has become a very serious situation at work.

 

[mot98]

I agree completely. If you have people creating user accounts on your system that you don't want, you have a real security issue. The amount of time you will spend attempting to crack these passwords is mundane. Lock down your user rights, and you will not have this problem in the future.

mot98..

"Where's the beer?"

 

[ensorg]

I don't think that you can tell what user created an account.

Do you have any idea who created the accounts, i.e internal or external

 

[mcsefinally]

thanks for all the help-

They are considering bringing some kind of off-site people to work on this. Because it has quickly escalated into criminal activity.

I was hoping to get some info before it went that far.

But management wants to take it further- I was trying to control it from within.

 

[mparra]

thats the name of the company that you work for

 

[lifegard2]

E-mail me at VAYMSEFSZVLV-at-spammotel.com and I'll send you a link. I've seen this particular package work, it's very impressive. It may take some time, but it gets most passwords.

Good luck!

 

[epohl]

L0phtCrack should have no problem decoding the password.

http://www.atstake.com/research/lc3/

 

[mcsefinally]

Thanks to everyone who is helping- we are getting somewhere with all the info you have sent my way.

Any ideas on how to determine who created an account if we did not have auditing to log account management?????