How to read SAM Folder

[Guest]

Well I have a big problem with users in my office so i need to read my
security accuont manager(SAM) folder I like to know if there is any way or
any software to read that folder

 

[David H. Lipman]

From: "Hippo" <[email protected]>

| Well I have a big problem with users in my office so i need to read my
| security accuont manager(SAM) folder I like to know if there is any way or
| any software to read that folder
|

If there was, that would leave a BIG hole in the OS and would be a "security risk" to say
the least.

 

[Pegasus \(MVP\)]

Well I have a big problem with users in my office so i need to read my
security accuont manager(SAM) folder I like to know if there is any way or
any software to read that folder

The SAM is not a folder, it's a file. You can read it with any
binary lister while Windows is not active, e.g. when booting
the machine with a Bart PE CD. However, this won't do you
any good because the passwords stored in the SAM are
encrypted.

What actually is your "big problem"?

 

[Jim]

Well I have a big problem with users in my office so i need to read my
security accuont manager(SAM) folder I like to know if there is any way or
any software to read that folder

Firstly, it is a file not a folder. This is the registry hive which
contains the security information. It is highly protected and deservedly
so.

Jim

 

[John John]

You won't see much of anything to fix in there, things in there are
hashes so you wont be able to do much with them. If you insist on
looking in at the key and its subkeys you have to use the System account
to do so. You can use the AT command to schedule a command prompt
under the System account, then from that command prompt you can launch
Regedit and you will be able to see inside the HKEY_LOCAL_MACHINE\SAM
key. The AT command is the command line scheduler.

To start a command prompt under the System account open a command prompt
and issue this command:

at xx:xx /interactive cmd.exe /k

xx:xx is the time that the command will run, in the 24 hr format, 10 PM
is 22:00. Set it one minute later than the current time and then wait
for the new command prompt to open, then run Regedit from that new
command session and it will run under the System account.

John