Re: Win2k Server + remote user enumeration

[ollie () DELPHISPLC COM (Ollie Whitehouse)]

Joerg,

Well AD has an LDAP interface poke around have a look...

Rgds

Ollie
------
Ollie Whitehouse
Security Team
Delphis Consulting Plc
+44 (0)20 79160200

-----Original Message-----
From: Joerg Weber [mailto:joerg () FS IS UNI-SB DE]
Sent: Tuesday, May 09, 2000 4:36 PM
To: VULN-DEV () SECURITYFOCUS COM
Subject: Win2k Server + remote user enumeration

Hi everyone,

 I was playing with a new Win2K server today (vanilla install) and poked
it with tools like gnit or cis to perform remote user enumeration. Works
fine on default workstations, but not on servers.
 Did MS wise up and change the default permissions in this regard? If so,
is it still possible to fetch that info via Active Directory maybe?

 Cheers,
        Joerg