Penetration Testing mailing list archives

RE: Exchange mail server settings - easy dump possible?


From: Jörg H. Schauff <joerg.schauff () bfv bund de>
Date: Tue, 24 May 2005 11:21:25 +0200

hi petr,

i don't know if this is exactly what you are looking for but you can try
this: 
Microsoft Product Support's Reporting Tools
http://www.microsoft.com/downloads/details.aspx?FamilyID=cebf3c7c-7ca5-408f-
88b7-f9c79b7306c0&DisplayLang=en

hope this helps
-joerg

-----Original Message-----
From: Petr.Kazil () eap nl [mailto:Petr.Kazil () eap nl] 
Sent: Monday, May 23, 2005 4:58 PM
To: pen-test () securityfocus com
Subject: Exchange mail server settings - easy dump possible?


I've been playing with a trial version of Exchange Server 2003.
Using the NIST, NSA and Microsoft security guidelines I'm 
getting a better idea of the relevant security settings.
But it's a pain to click through all the relevant screens in 
the System Manager GUI.

Is there a tool that dumps all the settings in one readable 
text file - for example like Dumpsec ?
I haven't been able to find it yet.

I have found and used the Exchange Best Practices Analyzer 
Tool, and it works fine and covers some of the relevant 
settings but (AFAIK) not all of them.

Or are the settings stored in the registry, a config file or 
an XML-file with settings somewhere?
I'm reluctant to try scripting, because I fear that the 
learning curve will be steep (I know VBscript but not the 
WMI/API interfaces I would probably need).

I will search through my old WindowsITPro magazines and 
probably it will be in here somewhere ...

Thanks for any suggestions.
Petr



Attachment: smime.p7s
Description:


Current thread: