VBScript for server security monitoring?

From: Christopher Hota (cghota_at_uwm.edu)
Date: 08/09/03

  • Next message: Larry Serflaten: "Re: VBScript for server security monitoring?" 
    Date: Sat, 9 Aug 2003 02:50:25 -0500

    Hi all-

    First of all, sorry for the multiple cross-posts; I tried to pick out
    germane groups to post to, so sorry-in-advance if it's not appropriate.

    Anway, getting down to business:

    As one of three AD administrators for a campus of more than 50000 users, I'm
    a little strapped for time. However, one of the major things that needs
    paying attention to is security on servers -- especially domain controllers
    (the recent RPC exploit madness just reiterated that fact).

    What I'm wondering is what tools have other network admins [yes, you!] have
    used -- via VBScript and WMI -- to automate the process of security
    auditing.

    Ideally, I would have a vbscript that fires off once every fifteen minutes,
    looks for weirdness (ie, >400 failed log in attempts from the same
    workstation or for the same username) in the the logs of a list of
    computers, then output the results to a file, and, if weirdness was found,
    email a short text message to my phone. Is this even possible?!?!

    Thanks in advance,

    chris.

    ----------------------------------------------
    Christopher Gautam Hota
    Information and Media Technologies
    University of Wisconsin - Milwaukee
    (414) 229-3186 office
    (414) 840-4682 cell
    ----------------------------------------------

  • Next message: Larry Serflaten: "Re: VBScript for server security monitoring?"

    Relevant Pages

    • Re: Only VBScript
      ... >> Security is the opposite of VBScript. ... >sausage pizza is the opposite of merge sort. ...
      (comp.programming)
    • Re: Only VBScript
      ... >>I can only use Html and VBScript for some security issues. ... sort and pizza without them cancelling out. ...
      (comp.programming)
    • Reading file from home drive/path
      ... I currently have VBScript that reads a file from the root of drive C: ... Set fso = CreateObject ... Now, due to security concerns, the file is being moved to the user's ...
      (microsoft.public.scripting.vbscript)
    • authenticated user dcom permission ok?
      ... Is there any reason that "Authenticated Users" cannot be added? ... Is SELF is a member of USERS which is a member of Authenticated Users? ... that same dcomcnfg popup (another tab next to Com Security). ... find how to add a user to that default Com Security" using WMI and VBScript. ...
      (microsoft.public.windowsxp.security_admin)