Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Step to find out about server information,

Posted on 2006-06-12
2
Medium Priority
?
206 Views
Last Modified: 2010-05-18
http://www.theiia.org/ITAudit/index.cfm?act=itaudit.archive&fid=5622
"
To make a manual anonymous connection, users need to run the following command from a command prompt:

     Net use \\<server ip address>\ipc$ /u:"" "" 

In this example, the user includes the server's Internet protocol address in the command (e.g., 10.10.10.10). The /u switch denotes the user account that is being employed to authenticate to the server — a null user account in this case or anonymous user connection.

After the anonymous connection is established, the user can access various security configurations on that server. The information that an attacker connecting as the anonymous user gathers is typically used in conjunction with other tools or attack methods. Such information includes:

    * Lists of computer users, including those in the Active Directory.
    * Lists of groups from the computer, including the Active Directory.
    * Security identifiers (SIDs) for user accounts.
    * User accounts for SIDs.
    * List of shared folders.
    * Account policies.
    * NetBIOS name.
    * Domain name with which the computer is associated.
    * List of trusted domains.
"

I do understand you can see all the shared folders after you execute the command above(  Net use \\<server ip address>\ipc$ /u:"" "" ). By going to that computer on you my computer //servername
But I don't understand how you can get the list of computer users using anonymous connection.
Can someone give me a demo?

0
Comment
Question by:kecoak
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 14

Accepted Solution

by:
canali earned 2000 total points
ID: 16892526

Set objDomain = GetObject("WinNT://<server ip address>")
objDomain.Filter = Array("User")

For Each objUser In objDomain
    Wscript.Echo objUser.Name
Next

Gas
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
This tutorial will teach you the special effect of super speed similar to the fictional character Wally West aka "The Flash" After Shake : http://www.videocopilot.net/presets/after_shake/ All lightning effects with instructions : http://www.mediaf…
Have you created a query with information for a calendar? ... and then, abra-cadabra, the calendar is done?! I am going to show you how to make that happen. Visualize your data!  ... really see it To use the code to create a calendar from a q…
Suggested Courses

604 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question