Re: Profiles with Default Password

[Charles Wilt <charles.wilt@xxxxxxxxx>]

On Fri, Aug 27, 2010 at 12:05 PM, Alan Campin <alan0307d@xxxxxxxxx> wrote:
> I stand corrected. Dangerous command.

Why is that?  Ignorance is bliss?

> On Fri, Aug 27, 2010 at 10:03 AM, Alan Campin <alan0307d@xxxxxxxxx> wrote:
>
> > As far as I know you cannot. That would mean getting a list of passwords
> > and the system is not going to get that for you no matter what.

No it doesn't.

You can't "get a list of passwords" from the system (ok assuming
you're gotten rid of the easily unencrypted MS LANMAN password store
by having your QPWDLVL at 1 or 3)  That's the whole point of a one-way
hash.

What the system can do is take a the name of a user profile, hash it
and compare it to the encrypted password.  If it's a match, then the
system can report that that profile has a default password.

HTH,
Charles