Skip to main content
Question

Create a Search for Blank Passwords

  • September 16, 2014
  • 2 replies
  • 5 views

Forum|alt.badge.img+7

Is there a way with Casper Suite to create a search that will return Computers that have local accounts with a blank password?
Following that, are you able to create a policy that would force the account to create a password?
Thanks you for your time,
Brian

2 replies

Forum|alt.badge.img+9
  • Contributor
  • September 16, 2014

I don't think this can be done. Since the passwords even if blank are saved in hash, you can't tell how long they are.


Forum|alt.badge.img+16
  • Valued Contributor
  • September 16, 2014

Just an idea...

Create a script that looks for local users.
Then try to run a simple task as each user using a blank password.
If that task completes you have found a user with a blank password.
Conversely if it errors they have a password set.
Either one should be easily detectable.