In researching this at one time (about 3 years ago....)
seems that it would take a specially built and custom written passfilt.dll to
accomplish this. Microsoft doesn't provide this functionality, but there
is stub 'C' code available (granted it's only notification and basic checking,
but hey - where else do you see code from the OS?) that one could use as an
example for building their own implementation.
However, if one thinks for a minute, it becomes apparent
that in the world of fairly bright folks that we frequent - if it's not
available, you have to wonder why. :-/
Here - check this:
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robbie Allen
Sent: Tuesday, August 05, 2003 9:27 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Password Lookup
I
don't believe MS does, but there are a few scripts/tools on the net that can be
used to do it. Have you enabled password complexity, which prevents
the use of dictionary passwords? Do you have account lockout
enabled? It is much harder (i.e. time consuming) to perform
dictionary attacks against AD if account lockout is turned
on.
Robbie
Allen
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Tuesday, August 05, 2003 10:15 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Password Lookup
Does anyone know if Microsoft provides provisions for doing dictionary lookups on passwords?
Thanks!
Ryan McDonald
Systems Administrator
The Bankers Bank
