[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

Windows Network & Server security audit tools or script ?

Posted on 2016-08-30
2
Medium Priority
?
147 Views
Last Modified: 2016-09-11
Hi All,

I'd like to know if there is any Powershell script or software that can be used to test what my DOMAIN\Test-Account can do given certain privilege in my AD domain ?

For example: The AD account is assigned as Local Admin account in domain joined Server A, it can access to server file share ...., Install application, shutdown / restart server, enumerate network share etc..
0
Comment
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 65

Accepted Solution

by:
btan earned 2000 total points
ID: 41776227
There is a AD Permissions Reporter that illustrate the AD object (which include that account object)permission @ http://www.cjwdev.co.uk/Software/ADPermissionsReporter/Info.html

Will have suggest the SysInternal tool such as when login using that test account to attempt to run the admin tools and in a way it demonstrate how "accessible" to the resources this account  has been granted @ https://technet.microsoft.com/en-us/sysinternals/bb795534

AccessChk
This tool shows you the accesses the user or group you specify has to files, Registry keys or Windows services.

 AccessEnum
This simple yet powerful security tool shows you who has what access to directories, files and Registry keys on your systems. Use it to find holes in your permissions.

ShareEnum
Scan file shares on your network and view their security settings to close security holes.

there is also powershell script to list out the privileges
Import-Module ActiveDirectory


$Groups = Get-AdGroup -Properties * -Filter * -SearchBase "OU=group,DC=domain,DC=com" 

$Table = @() 

$Record = [ordered]@{ 

"Group Name" = "" 

"Name" = "" 

"Username" = "" 

} 

Foreach ($Group in $Groups) 

{ 

$Arrayofmembers = Get-ADGroupMember -identity $Group | select name,samaccountname 

foreach ($Member in $Arrayofmembers) 

{ 

$Record."Group Name" = $Group.name 

$Record."Name" = $Member.name 

$Record."UserName" = $Member.samaccountname 

$objRecord = New-Object PSObject -property $Record 

$Table += $objrecord 

} 

} 

$Table | export-csv "C:\temp\Groups.csv" -NoTypeInformation

Open in new window

https://community.spiceworks.com/topic/282047-how-to-get-list-of-all-effective-rights-permissions-on-active-directory-objects?page=1#entry-5474279
0
 
LVL 8

Author Closing Comment

by:Senior IT System Engineer
ID: 41793607
Thanks !
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Check out what's been happening in the Experts Exchange community.
As much as Microsoft wants to kill off PST file support, just as they tried to do with public folders, there are still times when it is useful or downright necessary to export Exchange mailboxes to PST files. Thankfully, it is still possible to e…
In this video, viewers will be given step by step instructions on adjusting mouse, pointer and cursor visibility in Microsoft Windows 10. The video seeks to educate those who are struggling with the new Windows 10 Graphical User Interface. Change Cu…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question