Seven Deadliest Microsoft Attacks

Windows Passwords Overview

Windows operating systems offer several different methods of storing password information. The primary goal of Windows password storage is to provide a secure method of storing passwords on the operating system or within Active Directory and offer a mechanism to authenticate users and services. Refer to Chapter 2, Active Directory – Escalation of Privilege, for more information about the attacks against Active Directory. Additionally, password storage systems also allow administrators to define rules and apply policies to ensure passwords are complex to protect systems against unauthorized access. As part of these policies, administrators can enforce lockout thresholds, durations, reset policies, and many other options ...