Aug 22, 2011
tom
No Comments

Auditing Windows Server security

Question

Inspired by this question:

What tools are available to audit security on an existing Windows server, say Windows 2003, for my case, but what else, for which Windows Server version?

What can I do to test the existing protections on the network?

I’m looking for tools that can identify configuration errors, common and less common flaws, known issues, antivirus tools, any tool at all that can help identify and fix problems in the server. Extra bonus karma feel-good coffee bean points for tools that can be used network- or domain-wide.

Answer

The Penetration Testing Framework may be worth reading as a starting point. For the tools, there is a lot of them for auditing security, for example you may be interested in the following ones among many others:

Eeye retina

Nessus

Nmap

OpenVAS

Metasploit

and the many others that are gonna be reported in this thread.

Check more discussion of this question.

Related posts:

  1. Windows Server 2008 R2 Security Policies Appear to be Locked
  2. Hiding subfolders from users with Windows Server security
  3. Why aren’t “Windows Firewall with Advanced Security/Connection security rules” and netsh in sync?
  4. Is Windows Server 2008R2 NAP solution for NAC (endpoint security) valuable enough to be worth the hassles?
  5. Does Windows XP have C2 security certification?

Leave a comment