RE: Microsoft Software Auditing ?

["Beauford, Jason" <jbeauford () EightInOnePet com>]

Sysinternals is your friend.  Check out:

AccessEnum
Copyright (C) 2003 Bryce Cogswell
Sysinternals - www.sysinternals.com

To enumerate ACL's on Directories.

jmb

-----Original Message-----
From: Andrew Rogers [mailto:andrew.rogers () optusnet com au] 
Sent: Wednesday, April 06, 2005 9:55 PM
To: Beauford, Jason; security-basics () securityfocus com
Subject: Re: Microsoft Software Auditing ?


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am a fan of remote system information by digital labs.
http://www.digitallabs.net

scans via Ip range, active dir...

Comes with built in things that it can scan for - or you can add your
own (program paths, registry values etc.) will also scan some WMI stuff
such as asset tag number etc..

You can then export it all into xls or htm..

Very easy. Comes with a 15 day trial and different licence options
should you wish to continue using it.

On a secondary note, Does anyone know of a user permissions/groups
auditing tool? I need to be able to be able to query both AD and local
machines..

andrew

---------------------------------------------------------------------------
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information security
professionals.  Norwich University is fulfilling this demand with its MS in
Information Security offered online.  Recognized by the NSA as an
academically excellent program, NU offers you the opportunity to earn your
degree without disrupting your home or work life.

http://www.msia.norwich.edu/secfocus_en
----------------------------------------------------------------------------