Security Basics mailing list archives

Re: user default password checking tool


From: badz <smanaois3 () gmail com>
Date: Mon, 18 Sep 2006 11:55:52 +0800

You can actually write a script to check for the PwdLastSet property
of a user account object in AD and compare this against the date the
account was created.

...and Daniel is right, you shouldn't be posting details of your
default password for your users. =)

...badz...
Salvador Manaois III


On 9/16/06, Allan Seyberth <nullconnect () gmail com> wrote:
To come at the problem from an oblique, the password age utility
(http://www.systemtools.com/free.htm) can tell you the number of days
since their last password change.

Match that against maximum password age duration and you'll learn who
hasn't been changing their passwords.

On 9/14/06, vijay shetti <vijay.shetti () gmail com> wrote:
> hello all!!
>
> In my company when we create a new user he is given an initial
> password.But then he is told to change the password.The password is
> initial of the employee name followed by 123..
> for vijay shetti it willl be vs123...
>
> We have a domain based environment.I want to check now how many users
> have not changed their initial password using some tool that gives me
> list of usernames whose password has 123 in the end.
>
>
> We follow the same procedure for creating outlook mail password.If
> there is any tool/script that also helps me find out this then it will
> greatly help me.
>
>
> Waiting for your reply,
> Pavan.

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------




--
...badz...

smanaois3[at]gmail[dot]com
Linux Registered User 373124

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: