You cant access local SAM files while the OS is running, you need to boot
into dos and copy off the files.  There is also a way to do it while logged
in by getting the NT scheduler to run regedit32 ( it runs at system
permissions).

----- Original Message -----
From: "Andrew Blevins" <[EMAIL PROTECTED]>
To: "'Security Basics'" <[EMAIL PROTECTED]>
Sent: Wednesday, April 24, 2002 9:30 AM
Subject: NT Sam Hashes


> Have any of you had experience with this?
> I've been learning about some of the sam hash dump programs out there
(check
> @stake, sec33.com, etc.) and have found them to be very useful in dumping
> the sam hash of the machine they are run on locally. However, I have been
> unable to figure out how to dump the sam hash from a sam *file* I have
saved
> locally. Has anyone had any luck with this before? Thanks in advance for
any
> help.
>
> Blev
>
>

Reply via email to