Is authentication information encrypted?

[OM]

Hi,

I have a wmi script which query hardware information on remote computer.
I would like to know if the username and password that I supply for
authentication being encrypted?

Thanks

 

[Phil Wilson]

No it's not, but then again it doesn't need to be (assuming we're talking
about NTLM authentication here). When you log on to your system your
password doesn't go over the wire (even when you're in a domain), and it's
the same here. Look up the NTLM challenge-response algorithm. I'd worry more
about the fact that you probably have that user name and password in some
plain text in code somewhere.

 

[OM]

No it's not, but then again it doesn't need to be (assuming we're talking
about NTLM authentication here). When you log on to your system your
password doesn't go over the wire (even when you're in a domain), and it's
the same here. Look up the NTLM challenge-response algorithm. I'd worry more
about the fact that you probably have that user name and password in some
plain text in code somewhere.

Thanks,

Users have to supply their username and password in order to
authenticate to the remote system. So they are not stored in anywhere
within the script.