views:

484

answers:

3

Is there any way to obtain (not change) the password of the ASPNET account on a Windows Server 2003 server? I need to snyc my workstation's ASPNET account password with the one on the server I am trying to connect to.

I am trying to trouble shoot the following issue with my ASP.NET application.

+1  A: 

Essentially No there is no way to retrieve a windows account password. You can change them with various tools but retrieval is highly unlikely.

You can always create a proxy account on a domain controller and setup an app pool to run under a proxy account so permissions can span across workstations.

Quintin Robinson
+1  A: 

The only way to obtain an NT service account password is to ask someone who knows. If the person who ought to know doesn't then that same person ought to be able to reset it for you. In other words you should probably talk to your network administrator.

Andrew Hare
That is what I thought...I would ask to see if there was a way.
Michael Kniskern
+2  A: 

There is a simple way to obtain this password. This account is auto created so its not as simple as "Asking your network administrator".

First dump the password hashes from your domain controller, most anti virus will see PWDUMP has as a virus so be sure to disable AV before you run.

Second after you dump these passwords feed them into John the Ripper (note: John the ripper is not the best program to use to do this, but it does happen to be free)

Here is a (somewhat out of date) tutorial for breaking passwords with John

I do not have access to the domain controller and doing anything like this would set off all sorts of alarmings with the network admins.
Michael Kniskern
the more important point is that the ASPNET user is auto created, therefore no one knows the password, it's random (auto generated at install)
Chad Grant