I am an AD admin. I changed my colleague's password. He is also a user in active directory. Is there any way to see his old password? I need to set his old password back. I don't want him to know that I have reset his password .
No.
-
11
-
If he is only wants to revert to the old password this isn't completely true. A system state backup will have the a good copy of the AD including the database. You could use your recent backup and do an authoritative restore. Sure it would be like killing a cockroach with a nuke, but it could be done. – Zoredache Jan 7 '15 at 1:11
-
@Zoredache It's also possible for AD passwords to be stored encrypted rather than hashed (GPO option), and if there are old cached credentials on a machine somewhere, you could conceivably find them and crack them. Maybe. If the stars align. – Wesley Jan 7 '15 at 2:25
-
2Theoretically, given a backup, you could extract the old hashed password and overwrite the current one with it ... but it's still a crazy question. – SamB Jan 11 '15 at 3:02
I dont want him to know tgat i have reset his password
Well, no shit. Something to think about next time before you reset someone's password - or for that matter, when you're doing anything else you know you shouldn't be doing. Time to man up and accept the consequences of your actions. – HopelessN00b Jan 6 '15 at 16:15