Re: Local Admins

From: simonis (simonis_at_myself.com)
Date: 09/05/03

  • Next message: Perry, Brian: "RE: focus-ms@securityfocus.com"
    Date: Fri, 05 Sep 2003 15:36:46 -0400
    To: CHM Security <chmsecurity@hotmail.com>
    
    

    CHM Security wrote:
    >
    > Is there an easy way to scan 2K/XP machines to determine who is a member of
    > the administrator groups? We are having a lot of problems with our IT
    > personnel adding local users as admins on their boxes which is causing us
    > lots of problems. We just found one user who was hitting cancel everytime
    > the SUS would send updates to her machine because it wasn't convenient. We
    > have over 1000 machines in our domain and I really don't want to try and run
    > this manually, especially when there is a chance some tech might come behind
    > and start adding them back.
    >

    Theres a tool called locals, I think from the resource kit, that will
    remotely list members of specified groups. Writing a cmd or perl
    script to automate discovery would be easy enough.

    ---------------------------------------------------------------------------
    KaVaDo provides the first and only integrated Web application scanner and
    firewall security suite that prevent Web applications attacks, the most
    common form of online exploitation. Download a FREE whitepaper on Security Policy Automation for Web Applications.
    http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818
    ---------------------------------------------------------------------------


  • Next message: Perry, Brian: "RE: focus-ms@securityfocus.com"

    Relevant Pages

    • Re: Risks from standalone machines
      ... I would certainly prefer that the computers be domain ... It is much easier for instance if all the computers are a member ... keep the computers current with critical security updates via Group Policy. ... > Some users don't want to join their machines to the domain. ...
      (microsoft.public.security)
    • Re: the exploit that wasnt
      ... The other Mac Book Pro? ... brought Microsoft into a security discussion about Mac OS X. ... The number of security patches, ... if you were to scan random machines on the internet for a week, how many Unix machines do you believe you would hit? ...
      (comp.sys.mac.advocacy)
    • Re: Cryptogram Comment
      ... Or had to go through setting up basic security for their ... > bother me with Windows questions. ... > machines are broken. ... and Linux and other open OS's make all patches FREE to redistribute. ...
      (sci.crypt)
    • Re: Temporary Ban On Links In Posts To SRI
      ... understand that there is a risk when clicking ... low)" in the general case does not apply to SRI. ... implement the security measures recommended. ... update" even with machines that are restricted to only applications ...
      (soc.religion.islam)
    • Re: the exploit that wasnt
      ... The other Mac Book Pro? ... brought Microsoft into a security discussion about Mac OS X. ... The number of security patches, ... if you were to scan random machines on the internet for a week, ...
      (comp.sys.mac.advocacy)