Need to use ktpass to get a keytab for a machine account to feed into Wireshark ... can I change the machine account password on a node?

[Uri Simchoni]

https://wiki.samba.org/index.php/Keytab_Extraction

I added two methods to this page, should get what you want. The online 
one (net ads keytab create) is the easiest. The offline one uses ktpass, 
but feeds the password, which you can recover from secrets.tdb. This is 
a non-intrusive method which does not involve the directory - you can 
run it on any machine with ktpass.

Hope that helps,
Uri.

On 11/17/2015 09:52 PM, Richard Sharpe wrote:
> Hi folks,
>
> I need to use ktpass (I think) to dump a keytab for a machine account
> to feed into Wireshark to debug some problems, but ktpass changes the
> password.
>
> Can I use 'net ads changetrustpw' to resync the machine account
> password, or is there an easier way to do what I want?
>