how to store password hashs as scrypt in windows server 2016?

Question

how to store passwords of local users (including existing users) in the configuration as a scrypt\bcrypt hash.

Answer 1

how to store passwords of local users (including existing users) in the configuration

What configuration are you asking about? Some general info here.
https://learn.microsoft.com/en-us/windows-server/security/kerberos/passwords-technical-overview#how-passwords-are-stored-in-windows

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Hello @Srihari Ruttala

The users' password is stored in the Active Directory on a user object in the unicodePwd attribute. This attribute can be written under restricted conditions, but it cannot be read due to security reasons. The attribute can only be modified; it cannot be added on object creation or queried by a search. In order to modify this attribute, the client must have a 128-bit Secure Socket Layer (SSL) connection to the server. For this connection to be possible, the server must possess a server certificate for a 128-bit RSA connection, the client must trust the certificate authority (CA) that generated the server certificate, and both client and server must be capable of 128-bit encryption.

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-password-hash-synchronization

---------------

--If the reply is helpful, please Upvote and Accept as answer--