RE: VBScript to audit shares and share permissions

From: Klenke, Brian (Brian.Klenke_at_53.com)
Date: 09/21/04

  • Next message: Thor: "Fw: Serious Security Issue in Windows XP SP2's Firewall" 
    To: 'wnorth' <wnorth@verizon.net>, focus-ms@securityfocus.com
Date: Tue, 21 Sep 2004 14:21:38 -0400

    Wes/Lucas

    Thanks for both of your responses.

    Wes, in looking over the Perl Script, unless I am missing it, the code
    doesn't appear to list Share and Directory permissions for each share, which
    is really the thing that I'm after. If I missed the line(s) of code, I
    apologize in advance.

    Lucas, these shares aren't published in AD to my knowledge so I think I'm
    out of luck using your script.

    I need a good way to automate the process of checking a list of hosts for
    shares that allow Everyone access at the share level and Everyone access at
    file system level (and maybe some other permissions). I can get this info
    from Dumpsec, but one host at a time, and it's a manual process.

    I am also trying to avoid writing this myself, since I don't have, what's it
    called? Free time? :)

    I hope I can find a script or a package that will do this already (I've
    tried picking through various Nessus plugins and such).

    -----Original Message-----
    From: wnorth [mailto:wnorth@verizon.net]
    Sent: Monday, September 20, 2004 2:54 PM
    To: 'Klenke, Brian'; focus-ms@securityfocus.com
    Subject: RE: VBScript to audit shares and share permissions

    You can use a Perl script that produces the same output, and more (includes
    account enumeration etc.):

    http://www.roth.net/perl/scripts/scripts.asp?Null.pl

    -Wes

    >I am looking for a VBScript that will return a list of shares of a given
    computer, along with each share's share
    >permissions and NTFS permissions...
    >
    >Brian Klenke, CISSP CCNA

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated.

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Thor: "Fw: Serious Security Issue in Windows XP SP2's Firewall"

    Relevant Pages

    • RE: VBScript to audit shares and share permissions
      ... its permissions as well. ... Security Business Unit (ISA SE) ... VBScript to audit shares and share permissions ... Wes, in looking over the Perl Script, unless I am missing it, the code ...
      (Focus-Microsoft)
    • Re: Update Access table from Perl script via ODBC
      ... running my Perl script as a CGI script through IIS and that I might have ... set permissions for IUSR_machinename. ... > folder where the MDB file is located. ... > Doug Steele, Microsoft Access MVP ...
      (microsoft.public.access.externaldata)
    • Update Access table from Perl script via ODBC
      ... I'm trying to update an Access table from a Perl script with DBI and ... Since this is a simple one-table update, it's the permissions problem, not ... the cross tabs problem. ... checked in the DSN.) ...
      (microsoft.public.access.externaldata)
    • Re: Update Access table from Perl script via ODBC
      ... Recognize that user ids and permissions are part of the operating system, ... > running my Perl script as a CGI script through IIS and that I might have ... >> Doug Steele, Microsoft Access MVP ...
      (microsoft.public.access.externaldata)
    • Re: problem after upgrade
      ... If I understand your perl script is creating directories and files. ... Check your NTFS permissions. ... you will have to e.g. five IUSR_account permissions to create ... these files and folders (it does depend on how you wrote your script -- but ...
      (microsoft.public.inetserver.iis.security)