Solved

Problem to extract NTML hashes for this users,strange situation

Posted on 2016-11-23
5
79 Views
Last Modified: 2016-11-24
Ok so i type lusrmgr.msc there i find 2 administrator:
a
support_38

I use saminside to extract hashes everyhting ok
then i open task manager/users and i see there other 5 users connected, what ????
i search again and i find them in remote desktop users group,now i just wondering how to extract their hashes?
2.jpg1.jpg
0
Comment
Question by:john lambert
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 70

Expert Comment

by:Qlemo
ID: 41899912
Why do you think a missing dsa.msc is a proof for the machine not being a domain member? What is ANRSC?
0
 

Author Comment

by:john lambert
ID: 41900134
i don't know what is ANRSC i thought is a domain but is not,i don't know
0
 
LVL 70

Accepted Solution

by:
Qlemo earned 500 total points
ID: 41900483
The security token displayed in e.g. group members have to be resolvable. In fact they are "numerical" SIDs. Since this machine is able to translate the SID to a displayable name, it has to be either a domain name or the local machine name. You cannot use a non-local machine name here. We cannot help with that at all.
0
 

Author Closing Comment

by:john lambert
ID: 41900717
all respect master Qlemo
0

Featured Post

Revamp Your Training Process

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

No single Antivirus application (despite claims by manufacturers) will catch or protect you from all Virus / Malware or Spyware threats. That doesn't stop you from further protecting yourself however - and this article is to show you how.
The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question