A method and related equipment for domain password security detection

Abstract

The embodiment of the invention discloses a method for detecting domain password security and related equipment. The method in the embodiment of the present invention includes: obtaining the target hash value of the domain password corresponding to the target account; comparing the target hash value with the set of weak password hash values, and determining whether the set of weak password hash values ​​contains the target hash value The matching hash value, the weak password hash value set is obtained by hash conversion of the weak password table, and the weak password table includes multiple weak passwords; if the weak password hash value set contains the hash value matching the target hash value column value, the domain password is determined to be a domain weak password. The embodiment of the present invention also provides a domain control server and a device for detecting the security of domain passwords, which can detect weak passwords without multiple attempts, and improve detection of weak passwords without conflicting with domain security mechanisms. password efficiency.

Description

technical field [0001] The invention relates to the field of computers, in particular to a method for detecting domain password security and related equipment. Background technique [0002] "Domain" is a kind of management boundary, which is used for a group of computers to share a common security database. A centralized directory management service that handles network objects in an organization. Objects can be users, groups, computers, domain control stations, mail, configuration files, organizational units, trees, etc., as long as they are in the Active Directory structure The objects defined in the definition file (schema) can be stored in the active directory data file. [0003] Currently, a large number of enterprises use domains to manage company devices. In the process of account planning, a unique domain account will be created for each employee, and the domain account is required to change the domain password when logging in for the first time. The domain passwor...

AI Technical Summary

Problems solved by technology

That is to say, this method requires multiple verifications to verify all the domain weak passwords that have been set, and the detection efficiency is low, and the number of wrong verifications generated by this detection method will cause the user's account to be locked (domain security mechanism , incorrect attempts will suspend the account for many times), which conflicts with the domain security mechanism, causing the account to be unable to log in for a period of time

Images