RE: user default password checking tool

["Greg Jones" <GJones () cmcmortgage com>]

If you are using a Windows based domain with Active Directory, you can
force the users to change their password at first logon.   

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of vijay shetti
Sent: Thursday, September 14, 2006 8:42 PM
To: security-basics () securityfocus com
Subject: user default password checking tool

hello all!!

In my company when we create a new user he is given an initial
password.But then he is told to change the password.The password is
initial of the employee name followed by 123..
for vijay shetti it willl be vs123...

We have a domain based environment.I want to check now how many users
have not changed their initial password using some tool that gives me
list of usernames whose password has 123 in the end.


We follow the same procedure for creating outlook mail password.If there
is any tool/script that also helps me find out this then it will greatly
help me.


Waiting for your reply,
Pavan.

------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has
designated Norwich University a center of Academic Excellence in
Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting
experience. 
Using interactive e-Learning technology, you can earn this esteemed
degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


This e-mail and any documents transmitted with it are the property of SOUTHBank F.S.B. ® and/or its subsidiary or 
affiliate companies, is confidential, and intended solely for the use of the individual or entity the e-mail is 
addressed to.  If you have reason
to believe that you have received this message in error, please notify the sender and delete this message immediately 
from your computer.  Any other use, retention, dissemination, forwarding, printing, or copying of this e-mail or 
attachments is strictly prohibited.

SOUTHBank, F.S.B. and/or its subsidiary or affiliate companies do not endorse the use of unsolicited e-mail.  If you 
believe this e-mail was sent to you in error or you do not wish to receive these types of e-mail, please notify us by 
forwarding this message to remove () southbank com.


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------