[unisog] password checker?

Bob Kehr rskehr at ucdavis.edu
Wed Jun 1 20:32:51 GMT 2005


I use LC5 (http://www.atstake.com/products/lc/) for checking/auditing
systems (including Active Directory), and use PPE from ANIXIS to set and
enforce policies that assist in creating strong passwords. 

-Bob

-----Original Message-----
From: unisog-bounces at lists.sans.org [mailto:unisog-bounces at lists.sans.org]
On Behalf Of Nguyen, Minh
Sent: Wednesday, June 01, 2005 1:01 PM
To: mda at unb.ca; UNIversity Security Operations Group
Subject: RE: [unisog] password checker?

Matt,

In my office, we use ANIXIS Password Policy Enforcer to force people to
specific password requirement.  It's a relatively inexpensive program and
works quite well.  They just came out with the new version, so hopefully I
will get a chance to install it soon.

http://www.anixis.com/products/ppe/features.htm

As far as post audit - I used to use L0pht Crack - but haven't tried it
against active directory.  

Minh


____________________________________________

Minh Nguyen
Assistant Dean of Technology
College of Letters & Science Deans' Office mailto:mtnguyen at ucdavis.edu
(530)752-7647


-----Original Message-----
From: unisog-bounces at lists.sans.org
[mailto:unisog-bounces at lists.sans.org] On Behalf Of Matt Ashfield
Sent: Wednesday, June 01, 2005 5:43 AM
To: 'UNIversity Security Operations Group'
Subject: [unisog] password checker?

Hi All

We have a scrubbing process that new machines go through before they get
registered for use on the network. One feature we'd like to add to this
process is a password checker for windows boxes. Basically, we'd like
something that checks the passwords for the users, and if it's simple/easy,
we'd like to get them to change it.

I was just checking if someone on this list might have something that does
these functions, or a part of these.

Thanks

Matt Ashfield
Network Analyst
Integrated Technology Services
University of New Brunswick



_______________________________________________
unisog mailing list
unisog at lists.sans.org
http://www.dshield.org/mailman/listinfo/unisog

_______________________________________________
unisog mailing list
unisog at lists.sans.org
http://www.dshield.org/mailman/listinfo/unisog




More information about the unisog mailing list