Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
3
Newest
 Critic
Impact
~623 people reached

  • 0 posts edited
  • 0 helpful flags
  • 7 votes cast
Nov
3
comment How do I Clear a Warning about Best Practices for Running a Domain Controller on a Virtual Machine?
-1 - All of the time sync issues I've run across for DCs in virtualized environments have been config related issues to MS or the Hypervisor as rmalayter said. Skipping the check isn't an answer. Understanding why the BPA is identifying that check as a flag is a better answer. If you are seeing that item, then your virtualized DC is in a precarious state -- that is, it might not be causing issues NOW but the check is there because there are KNOWN cases where one of the characteristics identified in the TechNet article will cause problems -- fix it or roll the dice.
Apr
28
awarded  Critic
Oct
10
awarded  Student
Oct
10
asked W2K8R2 - A way to convert effecitve Group Policy settings to import on stand-alone machines for local policy?
Sep
4
comment How are cached Windows credentials stored on the local machine?
meh.. to me this is mincing words. the nature of "hashing" is a one-way process that creates basically an obfuscated value of the password using a cryptographically secure algorithm. The problem is that MD4 may have been cryptographically secure 10-15 years ago but is not even close anymore (neither is MD5 or SHA1 from a cryptographer's standpoint). So, if you have present-day hardware that can quickly brute force the key space of the algorithm or uncover a collision, then you can easily derive the password from the hash...
Sep
4
comment How are cached Windows credentials stored on the local machine?
Offline password cracking in the SAM is completely different than hooking LSASS in memory as Mimikatz and WCE do. And depending on the password complexity, offline password cracking of the SAM can be VERY easy (see samdump2)
Sep
4
comment How are cached Windows credentials stored on the local machine?
"The NT hash of the password is calculated by using an unsalted MD4 hash algorithm." -- Straight from TechNet: technet.microsoft.com/en-us/library/hh994565(v=ws.10).aspx
Dec
13
awarded  Supporter