Is there any way to confirm in the registry if a particular user account has a password enabled or not? Thank you.
Yes there is. Suggest you Google it a bit more to understand the registry settings and user information stored within. There is a lot of MSDN stuff out there.
RegRipper includes a plugin for parsing the SAM hive, including getting user password hints (if there is one).
To get more in the weeds with respect to cracking the password, extract the SAM and System hives and dump the hashes with pwdump7 or SAMInside. Or, take a look at this
http//
HTH
Thanks for the response, I used RegRipper against the SAM hive and I see "Password does not expire" I would take that as there is a password on the account correct? If there was no password would it state that? Thanks.
Thanks for the response, I used RegRipper against the SAM hive and I see "Password does not expire" I would take that as there is a password on the account correct?
No, it means that the password does not expire.
If there was no password would it state that? Thanks.
No. Even if the password is blank, there will be a hash stored in the Registry. I would strongly recommend that you download pwdump7 and/or SAMInside, both of which are free.
Will do, thanks.
If possible I like to also do a quick boot of the machine in VMware for a bit of peace of mind, to get to the logon screen, and confirm it asks for a password or not.