BatchPatch save Logondata CLeartext

[lakanie]

Dear Sir or Madam,

i have a question.

At PatchBatch it’s possible to enter the logon-data for the target system.

This Information are saved in clear-text.

Is there a workaround to encode the logon?

Many Thanks

Sven

[doug]

I’m actually not quite sure what you are referring to. I’ll try to cover all possibilities here…

1. In BatchPatch you have the ability to enter ‘Alternate Credentials’ for any row/host, which enables you to remotely perform actions on a target host with a logon account that is different from the logon that is used to run BatchPatch.exe. When you save a BatchPatch grid to a .bps file, the default behavior is for BatchPatch to encode/obfuscate the ‘Altnerate Credentials’ password that you entered into the row (or rows) in the .bps file. The password is not in plain text, but still this does not provide any real protection because it’s not encrypted, so if you want to *really* protect the .bps file then you need to either use your own encryption or you may use BatchPatch built-in encryption under ‘File > Password protect’. You can also optionally use ‘Tools > Settings > General > Require/force password protection to be used for all grids’ which forces you to use ‘File > Password protect’ for all grids.

2. Windows provides the ability for a computer to automatically logon with username/password that you store in the registry of the computer.

How to turn on automatic logon in Windows

This information is stored in plain text in the registry, and it has nothing to do with BatchPatch other than that BatchPatch provides the ability for you to input the information into a target computer’s registry automatically so that you don’t have to do it manually. BatchPatch provides this feature under ‘Actions > Reboot > Configure autologon after reboot’

I hope this helps.

-Doug

[lakanie]

Hello,

mnany thanks for this Informations. Im test ist at our System.

Sven

[Author]

Posts