Solved

Windows Network & Server security audit tools or script ?

Posted on 2016-08-30
2
107 Views
Last Modified: 2016-09-11
Hi All,

I'd like to know if there is any Powershell script or software that can be used to test what my DOMAIN\Test-Account can do given certain privilege in my AD domain ?

For example: The AD account is assigned as Local Admin account in domain joined Server A, it can access to server file share ...., Install application, shutdown / restart server, enumerate network share etc..
0
Comment
2 Comments
 
LVL 63

Accepted Solution

by:
btan earned 500 total points
ID: 41776227
There is a AD Permissions Reporter that illustrate the AD object (which include that account object)permission @ http://www.cjwdev.co.uk/Software/ADPermissionsReporter/Info.html

Will have suggest the SysInternal tool such as when login using that test account to attempt to run the admin tools and in a way it demonstrate how "accessible" to the resources this account  has been granted @ https://technet.microsoft.com/en-us/sysinternals/bb795534

AccessChk
This tool shows you the accesses the user or group you specify has to files, Registry keys or Windows services.

 AccessEnum
This simple yet powerful security tool shows you who has what access to directories, files and Registry keys on your systems. Use it to find holes in your permissions.

ShareEnum
Scan file shares on your network and view their security settings to close security holes.

there is also powershell script to list out the privileges
Import-Module ActiveDirectory


$Groups = Get-AdGroup -Properties * -Filter * -SearchBase "OU=group,DC=domain,DC=com" 

$Table = @() 

$Record = [ordered]@{ 

"Group Name" = "" 

"Name" = "" 

"Username" = "" 

} 

Foreach ($Group in $Groups) 

{ 

$Arrayofmembers = Get-ADGroupMember -identity $Group | select name,samaccountname 

foreach ($Member in $Arrayofmembers) 

{ 

$Record."Group Name" = $Group.name 

$Record."Name" = $Member.name 

$Record."UserName" = $Member.samaccountname 

$objRecord = New-Object PSObject -property $Record 

$Table += $objrecord 

} 

} 

$Table | export-csv "C:\temp\Groups.csv" -NoTypeInformation

Open in new window

https://community.spiceworks.com/topic/282047-how-to-get-list-of-all-effective-rights-permissions-on-active-directory-objects?page=1#entry-5474279
0
 
LVL 7

Author Closing Comment

by:Senior IT System Engineer
ID: 41793607
Thanks !
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

February 24, 2017 — On February 23, Travis Ormandy, a vulnerability researcher at Google, reported on Twitter (https://twitter.com/taviso/status/834900838837411840) that massive stores of data have been leaked by CloudFlare, a company that provide…
IT certifications are a concrete representation of continual learning on the part of the candidate.  Continual learning is necessary for the long term success of an IT professional, but are IT certifications the right path for you?
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

790 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question