Solved

Problem to extract NTML hashes for this users,strange situation

Posted on 2016-11-23
5
87 Views
Last Modified: 2016-11-24
Ok so i type lusrmgr.msc there i find 2 administrator:
a
support_38

I use saminside to extract hashes everyhting ok
then i open task manager/users and i see there other 5 users connected, what ????
i search again and i find them in remote desktop users group,now i just wondering how to extract their hashes?
2.jpg1.jpg
0
Comment
Question by:john lambert
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 70

Expert Comment

by:Qlemo
ID: 41899912
Why do you think a missing dsa.msc is a proof for the machine not being a domain member? What is ANRSC?
0
 

Author Comment

by:john lambert
ID: 41900134
i don't know what is ANRSC i thought is a domain but is not,i don't know
0
 
LVL 70

Accepted Solution

by:
Qlemo earned 500 total points
ID: 41900483
The security token displayed in e.g. group members have to be resolvable. In fact they are "numerical" SIDs. Since this machine is able to translate the SID to a displayable name, it has to be either a domain name or the local machine name. You cannot use a non-local machine name here. We cannot help with that at all.
0
 

Author Closing Comment

by:john lambert
ID: 41900717
all respect master Qlemo
0

Featured Post

MS Dynamics Made Instantly Simpler

Make Your Microsoft Dynamics Investment Count  & Drastically Decrease Training Time by Providing Intuitive Step-By-Step WalkThru Tutorials.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question