RE: SAM file editing

[MILES John M <John.Miles () co lane or us>]

Was the 'local machine' a domain server (PCD or BDC) or was it a workstation
of some flavor?


-----Original Message-----
From: Russell, Pat [mailto:pat.russell () jlspecialty com]
Sent: Friday, June 22, 2001 4:46 AM
To: pen-test () securityfocus com
Subject: SAM file editing


Is it possible to edit the SAM file in NT4.0 without using an external
program?  I have an incident where someone gave himself administrative
rights the domain but insists "all" he did was modify the SAM file on the
local machine.  This doesn't sound right but I am not sure.  Thanks for any
help...

Pat Russell
Process Control & Automation Engineer
J&L Specialty Steel, Inc.
pat.russell () jlspecialty com