Solved

Current List of Trusted Sites per User Profile Windows XP/2003 Server

Posted on 2011-09-07
7
283 Views
Last Modified: 2012-05-12
How can i get to a user profile on a PC/Server and see what each individual has setup in their trusted sites group?
Any and All help is greatly appreciated,
delebute
0
Comment
Question by:David Elebute
7 Comments
 
LVL 66

Accepted Solution

by:
johnb6767 earned 500 total points
ID: 36495709
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains

Subkeys (names are the websites) will have either a DWORD value of 0-4. Values of a "2" are Trusted Sites.

You could use a Logon Script to export this information, or if you just need a peek, use Remote Registry to look for thier key (the logged on user of a Remote PC) under HKEY_USERS\<SID>...

Or mount their Registry Hive....
0
 
LVL 12

Expert Comment

by:DarinTCH
ID: 36495716
the certs are listed in internet explorer -- options -- content -- certificates

if your looking for the actual cert (such as in a profile)... they end in .cer
try searching you location for files ending in that
you may need to make sure hidden and protected files are visible

also just a general search in windows for 'certificates' will provide some direction and references the
certificate MMC snapin
and minimum permissions needed
0
 

Author Comment

by:David Elebute
ID: 36495775
i am not sure my question was clear, i need to see the different sites under each users trusted sites via their profile or any oterh way to get the list from each user.
0
6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

 
LVL 8

Expert Comment

by:Amitabh Singh
ID: 36496660
Hi
this information stored under regedit in fallowing path
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
---------------------------------------------------------------------------------------------------------------------
Example : if user have google.com as trusted sites then you will found a reg folder in registry mention below  
---------------------------------------------------------------------------------------------------------------------
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\google.com]
---------------------------------------------------------------------------------------------------------------------
if you want to know each users trusted sites information then easiest way is create a script to export this information and  place this script as a user login script and when user login you will have this information !

Example : reg query "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\
ZoneMap\Domains"
0
 
LVL 8

Expert Comment

by:Amitabh Singh
ID: 36496747
to see the difference 1st you need to collect this information and then compare it via Excel filter
0
 
LVL 8

Expert Comment

by:Amitabh Singh
ID: 36496849
script Example are fallowing

 
FOR /F "TOKENS=9 DELIMS=\" %A IN ('REG QUERY "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains"^|find /i "."^|find /i "Domains\"') DO ECHO %USERNAME%;%A>>\\your_server_name\sahre_folder\output.txt

Open in new window


you need to replace this text with your network share folder name wear all user have shared access
\\your_server_name\sahre_folder
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 36497090
"i am not sure my question was clear, i need to see the different sites under each users trusted sites via their profile or any oterh way to get the list from each user."

And my answer was exactly what you are asking for... That's the only way to see the Trusted Sites..... Is there a part of it where you are not following what I have suggested?
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Shows how to create a shortcut to site-search Experts Exchange using Google in the Chrome browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch the Search Engine Menu: In chrome, via you…
How to create a custom search shortcut to site-search Experts Exchange using Google in the Firefox browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch your Bookmark Menu: Press 'Ctrl +…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now