Listing users in a group

  • Thread starter Thread starter Russ
  • Start date Start date
R

Russ

If you are logged in to an NT4 domain and you aren't a domain admin,
is there a way to list users of the Domain Admins group?

One of our non domain-admin users created an .asp page that showed all
of our NT4 domain admins and we're wondering how he did it.

Thanks
 
Null sessions can be used to extract a lot of information from a Windows NT machine
depending on it's configuration level of allowing anonymous access which is pretty
wide open in default installation and one reason why a firewall is so important to
keep malicious users from getting the same information. I am not sure exactly how he
did it, but there are free tools available to do that such as Dumpsec or Superscan
V4.0. See the links below for more information. --- Steve

http://support.microsoft.com/?kbid=246261
http://www.sans.org/rr/papers/index.php?id=286
http://www.somarsoft.com/
http://www.foundstone.com/index.htm...ation.htm&subcontent=/resources/freetools.htm
 
Back
Top