You cant access local SAM files while the OS is running, you need to boot into dos and copy off the files. There is also a way to do it while logged in by getting the NT scheduler to run regedit32 ( it runs at system permissions).
----- Original Message ----- From: "Andrew Blevins" <[EMAIL PROTECTED]> To: "'Security Basics'" <[EMAIL PROTECTED]> Sent: Wednesday, April 24, 2002 9:30 AM Subject: NT Sam Hashes > Have any of you had experience with this? > I've been learning about some of the sam hash dump programs out there (check > @stake, sec33.com, etc.) and have found them to be very useful in dumping > the sam hash of the machine they are run on locally. However, I have been > unable to figure out how to dump the sam hash from a sam *file* I have saved > locally. Has anyone had any luck with this before? Thanks in advance for any > help. > > Blev > >