Solved

Problem to extract NTML hashes for this users,strange situation

Posted on 2016-11-23
5
25 Views
Last Modified: 2016-11-24
Ok so i type lusrmgr.msc there i find 2 administrator:
a
support_38

I use saminside to extract hashes everyhting ok
then i open task manager/users and i see there other 5 users connected, what ????
i search again and i find them in remote desktop users group,now i just wondering how to extract their hashes?
2.jpg1.jpg
0
Comment
Question by:john lambert
  • 2
  • 2
5 Comments
 
LVL 68

Expert Comment

by:Qlemo
ID: 41899912
Why do you think a missing dsa.msc is a proof for the machine not being a domain member? What is ANRSC?
0
 

Author Comment

by:john lambert
ID: 41900134
i don't know what is ANRSC i thought is a domain but is not,i don't know
0
 
LVL 68

Accepted Solution

by:
Qlemo earned 500 total points
ID: 41900483
The security token displayed in e.g. group members have to be resolvable. In fact they are "numerical" SIDs. Since this machine is able to translate the SID to a displayable name, it has to be either a domain name or the local machine name. You cannot use a non-local machine name here. We cannot help with that at all.
0
 

Author Closing Comment

by:john lambert
ID: 41900717
all respect master Qlemo
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Suggested Solutions

At the beginning of the year, the IT world was taken hostage by the shareholders of LogMeIn. Their free product, which had been free for ten years, all of the sudden became a "pay" product. Now, I am the first person who will say that software maker…
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now