Was the 'local machine' a domain server (PCD or BDC) or was it a workstation of some flavor? -----Original Message----- From: Russell, Pat [mailto:pat.russellat_private] Sent: Friday, June 22, 2001 4:46 AM To: pen-testat_private Subject: SAM file editing Is it possible to edit the SAM file in NT4.0 without using an external program? I have an incident where someone gave himself administrative rights the domain but insists "all" he did was modify the SAM file on the local machine. This doesn't sound right but I am not sure. Thanks for any help... Pat Russell Process Control & Automation Engineer J&L Specialty Steel, Inc. pat.russellat_private
This archive was generated by hypermail 2b30 : Sun Jun 24 2001 - 19:20:01 PDT