How do I prevent the use of tools like Hyena from gaining info

From: ArizonaRay (ArizonaRay_at_discussions.microsoft.com)
Date: 06/18/05


Date: Fri, 17 Jun 2005 17:25:02 -0700

OK. Our IT Auditors just visted us and with a wealth of information
concerning our AD Domain Accounts, Member Server, info, etc. Fortunately, I
am friendly with one the Auditors and was able find out they obtained this
information. They obtained the information using a tool called "Hyena".
They were able to gather a lot of information with tool, with no elevated
user rights, just domain user accounts? My question is "How do I prevent
ordinary users from using such tools to gain information from our network?"
I find this to be serious security risk, in that anyone with access to our
network can get such information.



Relevant Pages

  • How do I prevent the use of tools like Hyena from gaining informat
    ... Our IT Auditors just visted us and with a wealth of information ... concerning our AD Domain Accounts, Member Server, info, etc. ... network can get such information. ...
    (microsoft.public.windows.server.security)
  • How do I prevent the use of tools like Hyena from gaining info
    ... Our IT Auditors just visted us and with a wealth of information ... concerning our AD Domain Accounts, Member Server, info, etc. ... network can get such information. ...
    (microsoft.public.windows.server.security)
  • How to Change Win 2000 Cached Account Password?
    ... They only have domain accounts. ... First PC has direct network connection. ... and still can access network via VPN. ...
    (microsoft.public.win2000.security)
  • Re: Cannot login to Win2000, but username/pass werent changed...
    ... Once a machine is disjoined from a domain, domain accounts ... If you are on the network local to the domain, ... I may have broken my Windows 2000 access, ... Now Windows won't recognize my password and says that my username and ...
    (microsoft.public.win2000.security)
  • Re: IAS as RADIUS
    ... RADIUS is not the solution for anything that I have read here yet. ... RADIUS still requires Domain Accounts to be on the domain,...which you ... this way they cant wreak havok on our network, ... The "supplicant" is a piece of software on the client PC. ...
    (microsoft.public.windows.server.networking)