Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

tracking password changes

Status
Not open for further replies.
Mar 11, 1999
8
US
Is there a way to look into the local NT workstation registry or the PDC registry to see when a particular user has changed their password?
 
i think that the best way to do this, is go to the quickfind (in start menu) and search for '*.pwl' . Here you will find users password files (encoded) and then you will need to check the date modification from there.<br>
<br>
I hope this helps.<br>
<br>
Karl.
 
I did not think that there were password files on NT4 workstations. I couldn't find any on mine!
 
you were right, i was thinking 95 terms, if you go to explorer, find winnt directory, then system32 and then config, then look for 2 files, security, and sam, these are the logs. i am looking now for a way to view these files. (sharing violation and all that). <br>

 
If you do not have NTFS installed on your system you could use an MS-DOS, WINDOWS 95 or WINDOWS 98 boot disk, then simply copy both SAM and SECURITY to the disk, remove the disk then boot back to NT, and view them.
 
yeah... good idea jsause.<br>
<br>
happy huntin'.<br>
<br>
Karl.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top