how to store password hashs as scrypt in windows server 2016?

Srihari Ruttala 1 Reputation point
2021-09-26T17:08:23.543+00:00

how to store passwords of local users (including existing users) in the configuration as a scrypt\bcrypt hash.

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,127 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,754 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Dave Patrick 426.1K Reputation points MVP
    2021-09-26T18:03:22.523+00:00

    how to store passwords of local users (including existing users) in the configuration

    What configuration are you asking about? Some general info here.
    https://learn.microsoft.com/en-us/windows-server/security/kerberos/passwords-technical-overview#how-passwords-are-stored-in-windows

    --please don't forget to upvote and Accept as answer if the reply is helpful--


  2. Limitless Technology 39,351 Reputation points
    2021-09-27T19:14:45.813+00:00

    Hello @Srihari Ruttala

    The users' password is stored in the Active Directory on a user object in the unicodePwd attribute. This attribute can be written under restricted conditions, but it cannot be read due to security reasons. The attribute can only be modified; it cannot be added on object creation or queried by a search. In order to modify this attribute, the client must have a 128-bit Secure Socket Layer (SSL) connection to the server. For this connection to be possible, the server must possess a server certificate for a 128-bit RSA connection, the client must trust the certificate authority (CA) that generated the server certificate, and both client and server must be capable of 128-bit encryption.

    https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-password-hash-synchronization

    ---------------

    --If the reply is helpful, please Upvote and Accept as answer--

    0 comments No comments