I have one ms access database with password ,how or where can to find password ? the OS is
Windows XP and i work with Encase forensic.
Hello,
The MS Access database password should match the User Account's Windows login password (http//
So, use a tool such as OSForensics to extract the correct User Account's login password (which will display as an encrypted hash value) and then use OSForensics to convert the encrypted hash value to the actual password.
The best way to do this is to use OSForensics to make an index of the forensic image of the workstation, and then OSForensics will automatically leverage unique words from the index to attempt to decrypt the Windows login password.
You will need to determine the Windows SID (ending in -1001 or -1002 etc.) that is associated with the MS Access database file you are trying to decrypt.
Hope this helps.
Regards,
Larry
Aleks,
An alternative method which I have used for e-discovery projects and had excellent luck with is a program from the grideon software company, link below. I've used it on a few DB's for the same project and even interacted with their support team with very favorable results. I recall it being a very straight forward GUI.
https://
Hello,
The MS Access database password should match the User Account's Windows login password (http//
windows.microsoft.com/en-us/windows/what-is-encrypting-file-system#1TC=windows-7).
I am sorry, but I completely fail to see any link between a MS Access database (on Windows XP) and EFS (on Windows 7). 😯
Last time I checked a password protected MS Access database it had "its own" password not unlike a Word or Excel (or .zip, .rar, etc.) file.
@Aleks
Which SPECIFIC version of Access is it?
Is it a .mdb or a .accdb file?
For old versions (.mdb files) these would do
http//
http//
jaclaz
I have not tested using EFS encryption on an Access Database file in Windows XP, but this seems to indicate it is possible https://
I have not tested using EFS encryption on an Access Database file in Windows XP, but this seems to indicate it is possible https://
support.microsoft.com/en-us/kb/307877
Sure it is possible, but surely it is not "standard" or even "common" AFAIK, whilst assigning a password to the "archive" is, I asked because I could not see (and still can't see) anything in the OP that I could connect with the use of EFS.
jaclaz