Is wntChgPswd Encrypted
Question:
When wntchgpswd is used to change a password remotely, is it encrypted over the network?
Answer:
The wntChgPswd() function calls either NetUserSetInfo() [for an administrative password reset] or NetUserChangePassword()
[when the old password is known] to perform its work. Password values have to be passed in to these Win32 API functions
in plaintext, and it is entirely up to how these API functions are implemented in Windows as to whether or not the values
get encrypted or not before being transmitted over the wire. To the best of my knowledge, Windows does not transmit password
values in plaintext, and instead uses a hash of the password.
Article ID: W17061
File Created: 2007:07:03:14:28:02
Last Updated: 2007:07:03:14:28:02