Re: Remote Shutdown
From: Pritam Pal (pritam@202.138.124.124)Date: 09/16/02
- Previous message: Michael Pruß: "AW: Suspicious URLScan.log"
- In reply to: Naveed: "Remote Shutdown"
- Next in thread: Rahul C. Kashyap: "Re: Remote Shutdown"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Pritam Pal" <pritam@202.138.124.124> To: <naveed.ahmed@vinciti.com> Date: Mon, 16 Sep 2002 11:11:08 +0530
Naveed,
PSShutdown is a utility which works for Win2K/NT only. A person can start a
shutdown only if he has sufficient right on the server or workstation. All
you need to do is review your security policies on the machines, change the
authorization for shutdown to limited persons only.
It works using RPC service, so it is not possible to stop this, unless until
you want to stop this service too !
Pritam Pal
(Security Administrator)
DCM Shriram Consolidated Limited
Kirtimahal, 19, Rajendra Place,
New Delhi -8
----- Original Message -----
From: "Naveed" <naveed.ahmed@vinciti.com>
To: <focus-ms@securityfocus.com>
Sent: Friday, September 13, 2002 02:54 PM
Subject: Remote Shutdown
> Hi
>
> I had a question on Windows environment and was hoping that you could
help.
> There are set of tools called PSTools. (available from sysinternal.com)
In
> this suite, there is a tool called PSShutdown which can remotely shutdown
a
> system if its IP address is known.
> What is the workaround for this .
> Appreciate your help in the same.
>
>
> Best Regards
> Naveed Ahmed, CISSP, CCSA, CCNA
> Practice Head - Information Security
> Vinciti Networks Pvt. Ltd.
> #1109, 24th Main Road,
> J.P. Nagar 1st Phase,
> Bangalore - 560 078, India
> *+91-80-655 6830 Ext. 264
> *naveed.ahmed@vinciti.com
> H www.vinciti.com
> Fear not the path of Truth for the lack of people walking on it.
> --------------------------------------------------------
> This information is intended only for the use of the individual to whom it
> is addressed and may contain information that is privileged, confidential
> and exempt from disclosure under law. If you are not the intended
recipient,
>
> you are hereby notified that any use, dissemination, distribution or
copying
>
> of this communication is strictly prohibited.
> --------------------------------------------------------------------------
-- > ----------------------------------- > > > > > >
- Previous message: Michael Pruß: "AW: Suspicious URLScan.log"
- In reply to: Naveed: "Remote Shutdown"
- Next in thread: Rahul C. Kashyap: "Re: Remote Shutdown"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]