Re: network scanner for windows patch KB835732

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 01/29/05


Date: Fri, 28 Jan 2005 19:13:32 -0600

I believe that you need to be local administrator on the computers you
scan - at least for a full scan. By default a domain admin would be in the
local administrators group of domain computers and it would be easy enough
for a domain admin to add another domain user to the local administrators
group on the domain computers with a logon script if that would help as then
a non domain admin could scan and otherwise manage domain computers without
being a domain admin. . -- Steve

"Gary" <Gary@discussions.microsoft.com> wrote in message
news:6753FCDA-11A2-421B-A155-E7C962F001CD@microsoft.com...
> It worked...kind of...
> When i did the scan of one of our subnets, it came up with about 20 pcs,
> but
> it said that the user signed on didn't have admin rights so it stopped the
> scan. Out of a list of 20, only 1 was fully scanned.
> I looked online to see if there was a way around an admin needing to be
> signed in, but i may have missed the answer with my Friday befuddled
> mind.
> It's a shame too, because the information that it provided on the one that
> was allowed to fully scan was very helpful.
> Is there some trick or option that i'm missing?
> Thanks again.
>
> "Steven L Umbach" wrote:
>
>> Microsoft Baseline Security Analyzer can scan the network for missing
>> critical updates with either GUI or command line. If you use the GUI you
>> can
>> select just check for security updates to speed up the scan. I don't know
>> of
>> a tool offhand to scan for just KB835732 but it would not be a bad
>> idea
>> to scan for all missing updates anyhow. The link below provided more
>> details. --- Steve
>>
>> http://www.microsoft.com/technet/security/tools/mpsa.mspx
>>
>> "Gary" <Gary@discussions.microsoft.com> wrote in message
>> news:87ED0A1C-F5F4-4FE0-AD29-A4A839AA9186@microsoft.com...
>> > Good Morning,
>> > Way back when (almost two years ago), Microsoft released a scanning
>> > tool
>
>> > that could probe hosts on a network to see if they they had critical
>> > patches
>> > KB824146 and KB823980 which was a particular useful tool when Blaster
>> > hit.
>> > I
>> > was wondering if there is a similar tool to scan for KB835732 critical
>> > patch
>> > since this seems to be a big one for blocking the vulnerbilities that
>> > some
>> > recent viruses are exploiting (like Sasser, Korgo, and more recently
>> > Sygate).
>> >
>> > Any suggestions?
>> >
>> > Thanks much!
>>
>>
>>



Relevant Pages

  • Re: Secure an Administative Group
    ... add/remove users to the local Administrators group. ... have "Domain Admin" privileges admin privileges on the local machines. ... Allow joining of computers to domain ...
    (microsoft.public.windows.server.active_directory)
  • Re: I need Ideas on securing a remote Win2k machine
    ... > * You can set security filtering on a group policy object. ... > * You can set a policy to run an application at logon (your kiosk app, ... Create a new Organizational Unit for the kiosk computers and move ... suggests that I need to get the domain admin to do a lot of this. ...
    (microsoft.public.win2000.security)
  • Re: Domain Admin Account deleted by local Admin
    ... > domain admin from local administrators group. ... or programs that should be install remote like antivirus client ... > users on their computers is not a sollution. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Permissions to join computers to domain
    ... having to add them to the Domain Admin group. ... and several which fall under the term 'delegation' as Microsoft has ... ordinary users can add up to 10 computers ... OU and using the "Delegation of Control Wizard" OR by ...
    (microsoft.public.windows.server.active_directory)
  • Re: Computer Account Creation
    ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... How can I delegate some users to add / join computers to the domain. ... add computers in the domain without giving them domain admin privileges. ...
    (microsoft.public.windows.server.active_directory)