Solved

Step to find out about server information,

Posted on 2006-06-12
2
203 Views
Last Modified: 2010-05-18
http://www.theiia.org/ITAudit/index.cfm?act=itaudit.archive&fid=5622
"
To make a manual anonymous connection, users need to run the following command from a command prompt:

     Net use \\<server ip address>\ipc$ /u:"" "" 

In this example, the user includes the server's Internet protocol address in the command (e.g., 10.10.10.10). The /u switch denotes the user account that is being employed to authenticate to the server — a null user account in this case or anonymous user connection.

After the anonymous connection is established, the user can access various security configurations on that server. The information that an attacker connecting as the anonymous user gathers is typically used in conjunction with other tools or attack methods. Such information includes:

    * Lists of computer users, including those in the Active Directory.
    * Lists of groups from the computer, including the Active Directory.
    * Security identifiers (SIDs) for user accounts.
    * User accounts for SIDs.
    * List of shared folders.
    * Account policies.
    * NetBIOS name.
    * Domain name with which the computer is associated.
    * List of trusted domains.
"

I do understand you can see all the shared folders after you execute the command above(  Net use \\<server ip address>\ipc$ /u:"" "" ). By going to that computer on you my computer //servername
But I don't understand how you can get the list of computer users using anonymous connection.
Can someone give me a demo?

0
Comment
Question by:kecoak
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 14

Accepted Solution

by:
canali earned 500 total points
ID: 16892526

Set objDomain = GetObject("WinNT://<server ip address>")
objDomain.Filter = Array("User")

For Each objUser In objDomain
    Wscript.Echo objUser.Name
Next

Gas
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question