|Subject:||recovering password stored with reversible encryption?|
|Posted by:||Eric Pearson (rep…@newsgrouponly.please)|
|Date:||Fri, 2 Jun 2006|
I have a server application which needs to log on as a configurable local
user for anonymous access, exactly like IIS does with the IUSR_XXX account.
I understand local passwords can be stored with "reversible encryption".
My question is, how can I retrieve the plaintext password so I can perform
LogonUser with that user and retrieve a token?
Or if I know the username of a local account, how can I perform LogonUser
and retrieve a token?