password login to windows 2000 domain with active directory

[Fabio]

All clients (windows 2000 professional) make a domain login (windows
2000 server with active directory). The user's password is sent over
the network encrypted? In this case what's the algoritm used?
Thanks for responding

 

[Danny Sanders]

See:
http://support.microsoft.com/kb/102716/en-us

hth
DDS

 

[Miha Pihler [MVP]]

Hi,

Since clients are Windows 2000 and they logon to Windows 2000 domain,
Kerberos is used for logon -- which is even more secure then NTLM...

Windows 2000 Kerberos Authentication
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/kerberos.mspx

 

[Roger Abell [MVP]]

The user's password is sent over the network encrypted?
No. It is not. The password is not sent at all.
A non-reversible hash is used (not sent either, just used).

 

[Fabio]

Thanks
Bye

Roger Abell [MVP] ha scritto:

No. It is not. The password is not sent at all.
A non-reversible hash is used (not sent either, just used).