Security Basics mailing list archives

Re: Resetting passwords


From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
Date: Thu, 18 Jan 2007 20:57:24 +0100

On 2007-01-18 gary () aspectcapital com wrote:
Is it possible to reset a local machine password, whilist using a
domain account, and without logging off and on a domain account? i.e
from the command line?

Also is it possible to reset a domain password without loggin onto the
domain. E.g A user authenticates with the domain, logs on/off using a
domain account, but uses a machine in a workgroup, and cannot reset
his password when expiration creeps up.

What kind of "local machine password" and what operating system?

Assuming you're talking about Windows and a user who has both a local
and a domain account, and wants to change the password of his local
account while being logged in with his domain account:

If his local account has admin privileges, he can change the password
by running the Computer Management console or Sysinternals' pspasswd
utility as the local admin.

If the local account does not have admin privileges I don't think he'll
be able to change the password without logging in.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq


Current thread: