I am an AD admin. I changed my colleague's password. He is also a user in active directory. Is there any way to see his old password? I need to set his old password back. I don't want him to know that I have reset his password .
1 Answer
No.
-
11
-
1If he is only wants to revert to the old password this isn't completely true. A system state backup will have the a good copy of the AD including the database. You could use your recent backup and do an authoritative restore. Sure it would be like killing a cockroach with a nuke, but it could be done. Commented Jan 7, 2015 at 1:11
-
1@Zoredache It's also possible for AD passwords to be stored encrypted rather than hashed (GPO option), and if there are old cached credentials on a machine somewhere, you could conceivably find them and crack them. Maybe. If the stars align.– WesleyCommented Jan 7, 2015 at 2:25
-
2Theoretically, given a backup, you could extract the old hashed password and overwrite the current one with it ... but it's still a crazy question.– SamBCommented Jan 11, 2015 at 3:02
I dont want him to know tgat i have reset his password
Well, no shit. Something to think about next time before you reset someone's password - or for that matter, when you're doing anything else you know you shouldn't be doing. Time to man up and accept the consequences of your actions.