(for Windows NT 4.0 / 2000 / XP / 2003 / Vista)
DumpUsers is able to dump account names and information even though RestrictAnonymous has been set to 1.
Download the exe file and run it from the Command Prompt. It will give you the instructions you need.
Q: When I double-click on the file a window comes up and disappears immediately. What's wrong?
A: You must run the file from a Command Prompt.
Q: What does the "-type" parameter mean?
A: This parameter must be "dc" if the target is a Domain Controller, and "notdc" if it isn't.
Q: What does start and stop RID mean?
A: RID means Relative ID - the last part of a SID. DumpUsers will list all accounts with RID's between the start and stop values.
Q: What does the "-mode" parameter mean?
A: This parameter can be either "quiet", list only account names, or "verbose", list information about each account too.
Q: How can I prevent this?
A: Set RestrictAnonymous to 2.
Q: I have a question that is not covered here. Where can I get help?
A: Send me
your question. I can't promise that I will have time to answer, but I'll do my best.