Home > Information > Forum > Show Topic
Show thread topic
17.04.2024
Reset Windows Password v14.2
 Telegram data recovery, Photo Database and Media Player investigation tools, and some more
12.04.2024
Office password recovery tools
 Resetting VBA passwords
01.03.2024
New blog post
 Dumping the history of users' IP addresses in Windows
20.02.2024
Reset Windows Password v14.1
 IP addresses history viewer, fast disk search, local security editor and some more

Passcape RSS news feed more news »

Articles and video

You may find it helpful to read our articles on Windows security and password recovery examples. Video section contains a number of movies about our programs in action

Bad LM hashes when loading from ntds.dit

Forum > Passcape Software > Windows Password Recovery > Bad LM hashes when loading from ntds.dit    
backman, 17:38:38 29.08.2013 Rating: 0 #1

Bad LM hashes when loading from ntds.dit  

Every time I load hashes from NTDS.DIT file I get bad LM hashes. All LM hashes contain junk while corresponding NT hashes seems to be correct. What's wrong with it? The Active Directory database was replicated through standard Win environment so it should be fine.
I've tried to dump the AD hashes on a running machine and once again all LM hashes are undecryptable. Looks like a program's bug.
 
IvanO, 17:52:09 29.08.2013 Rating: 0 #2

RE: Bad LM hashes when loading from ntds.dit  

It's not a bug. If the global system flag NoLmHashes is not set, Windows server 2003/2008/2012 store real LM hashes to keep a backward compatibility. Otherwise Windows put random data into LM hash slots and store the junk. So simply ignore the LM hashes, it's just a trash.
 
Entries 1 to 2 from 2  [ <<  1  >> ]



 
Site map | Terms of use | About us | Contacts