|
|
There are two files on the machien that hold the passwords: - %systemroot%\system32\config\sam
- The main repository for passwords.
- %systemroot%\repair\sam._
- A backup of the main file that can be restored via the repair process, compressed.
The SAM file is locked by the system, but it can be read if you have administrator privledges.
- pwdump2-Dumps the content of the SAM file.
|
|
