Analytics
12/13/2012
12:15 PM
Dark Reading
Dark Reading
Products and Releases
Connect Directly
RSS
E-Mail
50%
50%

Free Local Admin Discovery Tool First Step In Locking Down Admin Rights

Viewfinity tool discovers who has local admin and application rights

Waltham, MA – December 11, 2012 – The free Local Admin Discovery Tool from Viewfinity (www.viewfinity.com), the innovator of privilege management solutions, allows organizations to discover user accounts and groups that are members of the local “administrators” built-in user group on computers in their Windows system domains.

Facing today's unprecedented security threats, organizations of all sizes in all industries around the globe are asking the same basic question: How do we start a project like this? IT managers must have a planned approach to tackle this issue. Viewfinity answers this and the daunting question "Do you even know who has the local admin and application rights?"

"The Local Admin Discovery tool from Viewfinity allowed me to effectively gauge our IT department's progress in eliminating local administrators on our client systems," said Melissa S. Yee, Technical Analysis Advisor, Dell Services.

Andrew Barrett, Information Technology Officer for Scholle Packaging, explained, “Once our migration to Windows 7 was underway, we embarked on another major initiative which was to eliminate administrative rights from all endpoints. The first step was to get an accurate picture of who had local administrative rights. This was very important to understand because we have legacy applications in our environment that require administrative rights to run and we didn’t want to impede user productivity by prematurely removing those rights.

“We came across the Viewfinity Local Admin Discovery Tool. It identified which user accounts and groups were members of our local “Administrators” in our Windows domain. Having this information allowed us to quickly reassess who should have these rights, and easily remove those who shouldn’t have admin rights. This tool was instrumental in helping us approach our removal of administrative rights in an efficient, non-disruptive manner,” Barrett said.

Being a local Administrator presents an unwelcomed opportunity for damage to been done to the computer, either intentionally or accidentally, thus causing additional troubleshooting and repair work for IT and downtime for the end users. Often the damage, such as a virus or malware invasion, may even jeopardize other computers in a network as well. Having detailed information related to which users and groups have administrator rights on corporate desktops allows organizations to reassess who should have these rights. Once the analysis has been run, IT Administrators can take action, if needed, by removing the users or suspicious groups from the Administrators group.

To date, more than 1,600 IT security professionals have downloaded the Viewfinity Local Admin Discovery tool. It is available at https://www.viewfinity.com/Resources/Discover_Desktops.aspx, and is also available on a wide range of free download sites on the web.

About Viewfinity

Viewfinity provides privilege management and application control for desktops, laptops and servers, empowering enterprises to meet compliance mandates, reduce security risks, and lower IT costs. The Viewfinity solution allows enterprises to control end user and privileged user rights for applications and systems which require elevated permissions. Viewfinity's granular-level control enables companies to establish and enforce consistent policies for least privilege Windows-based environments based on segregation of duties. For more information, visit www.viewfinity.com.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-4988
Published: 2014-07-09
Heap-based buffer overflow in the xjpegls.dll (aka JLS, JPEG-LS, or JPEG lossless) format plugin in XnView 1.99 and 1.99.1 allows remote attackers to execute arbitrary code via a crafted JLS image file.

CVE-2014-0207
Published: 2014-07-09
The cdf_read_short_sector function in cdf.c in file before 5.19, as used in the Fileinfo component in PHP before 5.4.30 and 5.5.x before 5.5.14, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted CDF file.

CVE-2014-0537
Published: 2014-07-09
Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via uns...

CVE-2014-0539
Published: 2014-07-09
Adobe Flash Player before 13.0.0.231 and 14.x before 14.0.0.145 on Windows and OS X and before 11.2.202.394 on Linux, Adobe AIR before 14.0.0.137 on Android, Adobe AIR SDK before 14.0.0.137, and Adobe AIR SDK & Compiler before 14.0.0.137 allow attackers to bypass intended access restrictions via uns...

CVE-2014-3309
Published: 2014-07-09
The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass intended restrictions on time synchronization via a standard query, aka Bug ID CSCuj66318.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Marilyn Cohodas and her guests look at the evolving nature of the relationship between CIO and CSO.