RE: SAM file editing

[Rebecca Kastl <rkastl () neohapsis com>]

> -----Original Message-----
> From: Russell, Pat [mailto:pat.russell () jlspecialty com]
> Subject: SAM file editing
>
> Is it possible to edit the SAM file in NT4.0 without using an external
> program?  I have an incident where someone gave himself administrative
> rights the domain but insists "all" he did was modify the SAM file on
> the local machine.  This doesn't sound right but I am not sure.


The local SAM plays no part in Domain authentication schemes.  If this
person gave themselves administrative rights to the domain, then they
whacked a Domain controller.


--Rebecca Kastl