Windows 2003 server user password

I have the administrator password for a Windows 2003 domain.      Is there any way the admin account can see users' passwords.   I know I can change the password.     But I don't want to reset it if I don't have to.  
LVL 3
Gary Fuqua, CISSPOwnerAsked:
Who is Participating?
 
oBdACommented:
No. Only the password hashes are stored, not the actual password. You can't reconstruct the password from the hash.
0
 
oBdACommented:
Btw.: not only is there never a need to logon with the user's account and without the user being present/informed about this, but it's in your own best interest to never know any user password.
Or do you want to find yourself in a situation where a user can say "No, I didn't write this insulting email; this must have been the administrator logging on with my account, he knows my password."
0
 
Gary Fuqua, CISSPOwnerAuthor Commented:
This was a management request for all user names and passwords.     I explained that I could reset any account, but that wasn't good enough.    Now I have a third party saying it can't be done.   Thanks for your help.
0
 
oBdACommented:
Especially management shouldn't be considering this even remotely, and not from a technical standpoint. When user passwords are compromised this way (and a password that is known to anyone else other than the user himself is compromised) invalidates every kind of auditing and accountability. It means giving the user a free pass ("I didn't do it", http://en.wikipedia.org/wiki/Bart_Gets_Famous) on everything happening in the network under his name, unless he's actually caught in the act.
0
 
Gary Fuqua, CISSPOwnerAuthor Commented:
If the OWNER of the company asks for it,  the right answer is "OK here they are."    I will pass along your concerns, but my guess it the list is going into his office safe.  
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.