1/21/2023 0 Comments Windows needs your credentialsI need some help to find evidences of Kon-boot CD usage on an XP workstation into an Active Directory domain. Failed attempts to access network resources. Failed attempts to access EFS data (if present). Successful logons using local accounts, for the same reason. I have read something about it being able to use cached credentials to logon, but in my limited testing it did not succeed. Failed attemps to logon to a domain account you imply in your message that kon-boot allows to bypass the password for a domain account, but I think it only works reliably on local ones. so I would look for the following in the local and DC windows events I have not performed extensive testing about Kon-Boot but I don't think it will leave conclusive traces that it has been used….
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |