Re: Server Auditing

From: Muhammad Faisal Rauf Danka (mfrd@attitudex.com)
Date: 03/25/03

  • Next message: Times Enemy: "Re: SecurityFocus Article Announcement"
    Date: Tue, 25 Mar 2003 12:55:39 -0800 (PST)
    From: Muhammad Faisal Rauf Danka <mfrd@attitudex.com>
    To: "K. K. Mookhey" <cto@nii.co.in>, sursillojr@sju.com
    
    

    Wonderful tool made and suggested by Mookhey and his colleagues there for windows NT/2k information gathering.

    However, for NDS I'll recommend the following:

    http://www.nmrc.org/files/snetware/
    http://www.nmrc.org/files/netware/
    and specially http://www.nmrc.org/pandora/index.html

    and AS/400 *oldie goldie*, there is not much about it though, but anyway following has been always useful for me regarding AS/400

    http://www.redbooks.ibm.com/pubs/pdfs/redbooks/gg244200.pdf
    and
    http://home.earthlink.net/~vleveque/SecQnAframeset.html

    If you opt to go for commercial AS/400 stuff, then:
    http://www.as400security.net/toolkit/index.htm (I haven't tried it though but remember seeing it quoted somewhere sometime)

    Regards
    --------
    Muhammad Faisal Rauf Danka

    --- "K. K. Mookhey" <cto@nii.co.in> wrote:
    >Hi,
    >
    >We have a free tool called DumpWin that does an extensive amount of data gathering on Windows 2000/NT machines including user information, password policies, account lockout policies, etc.
    >The URL is http://www.nii.co.in/research/tools.html
    >It's a small exe that runs on the server side, you only need to drop it and execute it.
    >Cheers,
    >
    >K. K. Mookhey
    >CTO,
    >Network Intelligence India Pvt. Ltd.
    >Web: www.nii.co.in
    >=================================
    >Security Auditing Handbooks
    >http://www.nii.co.in/research/handbook.html
    >=================================
    >
    >
    >----- Original Message -----
    >From: "Steven J. Ursillo, Jr" <sursillojr@sju.com>
    >To: <security-basics@securityfocus.com>
    >Sent: Saturday, March 22, 2003 3:21 AM
    >Subject: Server Auditing
    >
    >
    >> Hello All,
    >>
    >> I am evaluating the use of different commercial and freeware applications
    >> that can perform audits of users, passwords, and account management
    >> configuration for the following platforms:
    >> Windows 2000 Active Directory
    >> Novell NDS/Netware 5.X and above
    >> AS400
    >> I am looking to run these tools on a laptop with a minimum amount of
    >> server (on servers to be tested) software installation and configuration. Any
    >> feed back or recommendations would be appreciated.
    >>
    >> Thanks
    >>
    >>
    >>
    >> -------------------------------------------------------------------
    >> SurfControl E-mail Filter puts the brakes on spam,
    >> viruses and malicious code. Safeguard your business
    >> critical communications. Download a free 30-day trial:
    >> http://www.surfcontrol.com/go/zsfsbl1
    >>
    >>
    >
    >-------------------------------------------------------------------
    >SurfControl E-mail Filter puts the brakes on spam,
    >viruses and malicious code. Safeguard your business
    >critical communications. Download a free 30-day trial:
    >http://www.surfcontrol.com/go/zsfsbl1

    _____________________________________________________________
    ---------------------------
    [ATTITUDEX.COM]
    http://www.attitudex.com/
    ---------------------------

    _____________________________________________________________
    Select your own custom email address for FREE! Get you@yourchoice.com w/No Ads, 6MB, POP & more! http://www.everyone.net/selectmail?campaign=tag

    -------------------------------------------------------------------
    SurfControl E-mail Filter puts the brakes on spam,
    viruses and malicious code. Safeguard your business
    critical communications. Download a free 30-day trial:
    http://www.surfcontrol.com/go/zsfsbl1


  • Next message: Times Enemy: "Re: SecurityFocus Article Announcement"

    Relevant Pages

    • RE: How do I create a Backup Domain Controller?
      ... I would think DNS must be in place on the BDC so that client machines ... the global server is not operational. ... I recommend you setup the shares for Roaming ... The following articles describe the mechanism that Windows XP ...
      (microsoft.public.windows.file_system)
    • Re: upgrade from win2k to win2003 AD
      ... Most will recommend you manually transfer the OM roles first. ... > I currently have a Windows 2000 AD domain. ... > upgrade my AD onto Windows 2003 Server. ...
      (microsoft.public.windows.server.active_directory)
    • RE: Win2000+Ex2000 -> Win2003+Ex2003 Domain rename
      ... we do not recommend using the third method. ... 325379 How to upgrade Windows 2000 domain controllers to Windows Server 2003 ... Upgrading from Exchange 2000 Server ...
      (microsoft.public.windows.server.migration)
    • Re: New SBS 2003 joining to existing network
      ... Based on the KB article below, we do not recommend using a public domain ... 296250 The Domain Name System name recommendations for Small Business Server ... standard Windows domain. ... So, based on the information you provided, we suggest that use the SBS as ...
      (microsoft.public.windows.server.sbs)
    • SecurityFocus Microsoft Newsletter #154
      ... MICROSOFT VULNERABILITY SUMMARY ... ISS RealSecure Server Sensor SSL Denial Of Service Vulnerabi... ... Roger Wilco Remote Server Side Buffer Overrun Vulnerability ... available for Microsoft Windows operating systems. ...
      (Focus-Microsoft)