Pass-the-Hash Is Dead: Long Live LocalAccountTokenFilterPolicy
Nearly three years ago, I wrote a post named “Pass-the-Hash is Dead: Long Live Pass-the-Hash” that detailed some operational implications of Microsoft’s KB2871997 patch. A specific sentence in the security advisory, “Changes to this feature include: prevent network logon and remote interactive logon to domain-joined machine using local accounts…” led me to believe (for the …
Pass-the-Hash Is Dead: Long Live LocalAccountTokenFilterPolicy Read More »