Hack Proofing Windows 2000 Server
Addresses concerns one might have about network security and how to protect your network environment.
TABLE OF CONTENTS Hack Proofing Windows 2000 Server
Using Miscellaneous Tools
Some tools are useful, but they don t fit into the categories previously discussed. The tools in this section teach you how to physically secure your floppy drive, see what privileges have been assigned, check how long your servers have been online, and scan your computer for vulnerabilities. All of these tools are provided with the Windows 2000 Server Resource Kit.
Using Show Privilege
Show Privilege ( ShowPriv) shows the privileges assigned to users and groups. ShowPriv is a command-line tool run locally on a machine to view assigned privileges. To view privileges granted to the domain, you must run ShowPriv on a domain controller. The only file required for Show Privilege is ShowPriv.exe. To use ShowPriv, go to the command prompt and type in showpriv privilege_name, where privilege_name is the selected privilege that you want to investigate. Table 12.26 shows some of the more common privileges.
| Privilege | Description |
|---|---|
| Act as part of the operating system | Allows a process to authenticate like a user. |
| Add computers to a domain | Allows the user to join computers to the domain. |
| Back up files and directories | Allows the user to bypass NTFS permissions when backing up the system. |
| Bypass traverse checking | Allows users to traverse the directories of a folder without being assigned permissions to the folder. |
| Change the system time | Allows the user to set the time for... |
Copyright Syngress Publishing, Inc. 2001 under license agreement with Books24x7
