Daniel,
Thanks for that...and please do not misunderstand, as I am not trying to suggest that you are wrong or incorrect in some way.
Adam had asked/stated:
"I'm working on a MS Small Business Server 2003 machine where there is some suggestion that perhaps unauthorized access is occurring from old user accounts that weren't disabled / removed when employees left."
To me...and I could be the one completely off-base here...that sounds as if he's asking the question of access; specifically, was someone accessing the system using old accounts.
I understand that at the end of the post, there is the question of finding something equivalent to the SAM database, but for domain accounts. If you were to isolate just that question from the context of the rest of the post, I would completely agree with you. I simply read this as a question of how to go about determining the active user accounts used to access a specific system.
Of course, I could be wrong.
↧