<div>
I am using NT passwords. &nbsp;Would you argue that these are as strong as using salting? &nbsp;If salting is not an option for windows NT then maybe they are refering to another platform. &nbsp;I just want to get enough valid informatoin so iif they ask me why I can respond appropriately. &nbsp;Thanks.
</div>


I am using NT passwords.  Would you argue that these are as strong as using salting?  If salting is not an option for windows NT then maybe they are refering to another platform.  I just want to get enough valid informatoin so iif they ask me why I can respond appropriately.  Thanks.

<div>
I found a really good article on this and windows. Thanks for your direction
</div>


I found a really good article on this and windows. Thanks for your direction

<div>
<div class="content wysiwyg-content">
I am running a windows server 2003 stand alone server. Not connected to active directory. &nbsp;I need to know if when I create a local luser account and password does it do the following automatically or can I do it this way?<br />
<br />
Passwords must be stored in a salted hash format. The salt used must be unique to each user. Approved hashing algorithms include those with a minimum strength of 256 bits, e.g. SHA-256.
</div>
</div>


I am running a windows server 2003 stand alone server. Not connected to active directory.  I need to know if when I create a local luser account and password does it do the following automatically or can I do it this way?

Passwords must be stored in a salted hash format. The salt used must be unique to each user. Approved hashing algorithms include those with a minimum strength of 256 bits, e.g. SHA-256.

Does Windows Server 2003 store passwords in a salted has format?

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).