Password Tools 2

[Tracknut]

Looking for tools to determine the following:
- users who have their passwords the same as their userid's
- admin/administrator accounts with blank passwords

 

[Grenage]

What systems are you using, MS network?


Carlsberg don't run I.T departments, but if they did they'd probably be more fun.

 

[Tracknut]

yes

 

[Grenage]

While you can crack all of the passwords and check them, it might be easier to enforce the Microsoft password policy across your domain. You can, for example, ensure that their user names are not used, that they contain a certain amount of non-alphabetic or numeric characters, exceed 6 characters, are not alternated etc.

Have a look here:

http://www.microsoft.com/smallbusiness/support/articles/enforce_strong_passwords.mspx

Carlsberg don't run I.T departments, but if they did they'd probably be more fun.

 

[guitarzan]

I believe MBSA will tell you about admin accounts with blank passwords, not sure about the other.

http://www.microsoft.com/technet/security/tools/mbsa2/default.mspx

http://www.microsoft.com/technet/Security/tools/mbsa2/qa.mspx

 

[tfg13]

A combination of using Grenage's ideas, and guitarzan's ideas should get you where you want to be....

The Star Ninja is throwing them at you Grenage and guitarzan!

 

[Darksat]

You could probably use a password cracker and a really basic wordlist as well.

The Ultimate IT security Forum

http://darksat.x47.net