NT 4.0Domain Assessment Tools

[adfreek]

Hello,

I need to visit a client for a few weeks as they are requesting a fully documented layout of their existing NT 4.0 domain. They have hundreds of remote branch offices and are also requesting a breakdown of their security from a Windows standpoint. Can anyone recommend some utilities/tools to use? has anyone had to take on a similar engagement.

Regards

 

[rmb1905]

It really depends on how detailed the layout has to be. Personally i often used kixtart as loginscript and added parts to make an inquiry of the used hardware (and installed software) and parsed that to txt files in a predefined folder.

I assume you know all ip adresses/ranges. A tool which can show you in a GUI environment what machines are online and what hardware/software/services they run is DameWare.

This assignment just doesn't look like a simple task. If you want to do it right, you really need to plan everything and have to KNOW what you customer really wants to know.

The security issue completely depends on if and how their policy is on patching servers/workstations. Allso depends on their policy how userrights are distributed. Check that policy (what they SAY they do) and compare to how it is implemented. This says a lot about their vulnaralbility. (excuse for the bad spelling, but english is not native for me)

Between you and me: this looks like a huge job and potential VERY interesting..... especially when they decide to do a major upgrade from NT4 to ....... ;-)