Re: How to investigate
From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 05/27/05
- Next message: Steven L Umbach: "Re: Deny Software Installation to Students"
- Previous message: Carl Gross: "Re: Shared permissions vs. security"
- In reply to: Bijan Kianifard: "How to investigate"
- Next in thread: Bijan Kianifard: "Re: How to investigate"
- Reply: Bijan Kianifard: "Re: How to investigate"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 27 May 2005 12:42:20 -0500
There are a couple ways. The command net use when run on a computer will
show network shares that it is connected to. The command net session will
show what shares other user are connected to on the computer where the
command is run. You can also use Computer Management and then select connect
to another computer to see sessions on the target computer via shared
folders/sessions. It would also be a good idea to enable auditing of logon
events on the domain computers and then you can check the security log for
what users have connected to that computer at what times.
http://www.microsoft.com/technet/security/prodtech/windows2000/secmod144.mspx
You can also use the command netstat -an to see network connections
established on a computer. To run this command on a remote computer that you
are an administrator on you can use the free tool psexec from SysInternals
as shown in the link below. --- Steve
http://www.sysinternals.com/ntw2k/freeware/psexec.shtml
You can also use the user rights access this computer from the network and
deny access this computer from the network to manage what users can access a
network share. For Remote Desktop connections you can manage the user rights
for allow/deny logon through Terminal Services. Ipsec can also be used to
control access to a computer for all or specific protocols/ports/IP
ddress. --- Steve
"Bijan Kianifard" <BijanKianifard@discussions.microsoft.com> wrote in
message news:A42DCE38-95B4-4229-A0B4-110CE23C069D@microsoft.com...
> Hi,
>
> I'm the administrator of a domain. I want to investigate the connections
> between workstations from my workstation. In other words I want connect to
> workstation X and check if it is connected to other workstations or not
> (by
> means of sharing remote desktop...). How can I do it? Do I have to install
> a
> service for this purpose or is there any third party software to cary out
> this job?
>
> Thanks in advance,
> Bijan
- Next message: Steven L Umbach: "Re: Deny Software Installation to Students"
- Previous message: Carl Gross: "Re: Shared permissions vs. security"
- In reply to: Bijan Kianifard: "How to investigate"
- Next in thread: Bijan Kianifard: "Re: How to investigate"
- Reply: Bijan Kianifard: "Re: How to investigate"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|