Time to read up on Windows authentication?

IIRC, Windows only sends the hash of the password when authenticating, anyway, not the password itself. The password itself is stored nowhere, not even in the SAM.

IMHO, any install that uses
  • Microsoft Installer technology via GPO
  • Task Scheduler from an admin workstation or scripts scheduled via Task Scheduler
  • scripts that processes install requests and is run via Task Scheduler or as a service (e.g. KSMS)
  • remote execution via WMI or other tools
are secure as they do not require a password stored anywhere. BTW, PSEXEC transmits the password in clear text and is thus susceptible to network sniffing.

[ 04. November 2003, 02:49: Message edited by: sealeopard ]
_________________________
There are two types of vessels, submarines and targets.