Metasploit mailing list archives

priv_passwd_get_sam_hashes: Operation failed: 87


From: ron at skullsecurity.net (Ron)
Date: Tue, 03 Mar 2009 09:46:48 -0600

Patrick Webster wrote:
As a guess, Vista may have changed the way they handle the SAM
hashes... It might be protected by the "Protected Storage" service or
something.... Maybe create a Windows service which runs as LocalSystem
and retest? Srvany.exe can create services, but unsure about Vista
compatibility.

Or retry as "RunAs Administrator" but set the file to use Windows
2000/XP compatibility mode.

I don't have Vista to look into it, sorry.

-Patrick

It may also be an issue with UAC. I was experimenting with running 
scripts against Windows 7 yesterday, and found that I had to turn UAC to 
the lowest possible level before I could actually call administrative 
functions from a non-interactive script.

Ron



Current thread: