The world article a big copy, I am also drunk ...
A "wrong" article over and over again is reproduced, blindly reproduced, do not look at at all. will only mislead the novice.
on how to export all the hash information under the WINDOWS2003 domain control.
1. Using the Backup Restore Wizard
2. Use Advanced mode
Select: Back up System State data only
Continue to the next step: Choose a Save location
Eventually
、
Wait for backup to complete .....
Next is the restore:
Continue with the wizard
Senior
Select the backup file that you just backed up.
In advanced, select a location to save:
Wait....
When the restore is complete, the Ntds.dit file is generated under the C:\hello\active directory folder that you just created.
Next is the key step: using the Fix
esentutl/p Ntds.dit
OK to get it done ....
Finally use Quarks-pwdump.exe to read the hash
Quarks-pwdump.exe--dump-hash-domain--ntds-file Ntds.dit
Quite complete ....
Windows 2008 can also use this method, but the windows2008 or Windows 2012 domain control has other ways to export all hashes.
Windows 2003 domain control server export all hash method