SAM Win2k File

Hey,

The admin at school asked me to look around the network for security problems, its win2k with about 1000+ computers(there rich).

Anyways, the win2k password files(SAM file) is based in c:\winnt\config. I know that no one can really access that, but i read that it when the repair utility is ran, it backs up the sam file to c:\winnt\repair. And guess what every pc i have looked on has the sam file in that repair dir. But the file is only 20k big, and what i need to know is, is this file big enough to hold all the passwords for like 500+ users? or will the real important sam file be on the server only? if it is then whats the file on every pc on the network.

Thanks
TNT

Hmm... that's neat... I just checked my workstation here at work, and it's exaclty like you described. It's a 20.0K file on my system, too, so I'm thinking it'd just be for whoever's stored locally on that system....

I just did a search on my workstation (W2K pro) for *.sam and it found lmhosts.sam in the root folder, and then a "amipro.sam" file in every user's "documents and settings" under templates...

interesting.. however mine were only 5k a piece.. and the root one was only 4k


and a search of the servers here all yieled the same results..

The file I was talking about wasn't anything .sam... It's just called SAM

::feels retarded::

oh... my bad

Lol yer, i found a prog to break the sams encryption, and that is a big problem for my school if that file stores all the passwds, Although the directory is encrypted and you can only view it from a bug in ms word. And from what i have checked out its not possible to copy it, but i have informed the admin of the problem....