Re: How do I prevent the use of tools like Hyena from gaining info

From: Srikrishna Komatineni (srikrishnak_at_hotmail.com)
Date: 06/19/05 

Date: Sun, 19 Jun 2005 17:49:28 +0800

My personnel observation when Microsoft remote registry service and Netbios
are running a user with even just guest rights can scan the network to get a
lot of information such as the shares,user id's, password policy,services
running etc....

"ArizonaRay" <ArizonaRay@discussions.microsoft.com> wrote in message
news:87A568C5-E256-474C-92CC-C272BB732E27@microsoft.com...
> OK. Our IT Auditors just visted us and with a wealth of information
> concerning our AD Domain Accounts, Member Server, info, etc. Fortunately,
> I
> am friendly with one the Auditors and was able find out they obtained this
> information. They obtained the information using a tool called "Hyena".
> They were able to gather a lot of information with tool, with no elevated
> user rights, just domain user accounts? My question is "How do I prevent
> ordinary users from using such tools to gain information from our
> network?"
> I find this to be serious security risk, in that anyone with access to our
> network can get such information.
>

Relevant Pages