Analytics
12/13/2012
12:15 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Free Local Admin Discovery Tool First Step In Locking Down Admin Rights

Viewfinity tool discovers who has local admin and application rights

Waltham, MA – December 11, 2012 – The free Local Admin Discovery Tool from Viewfinity (www.viewfinity.com), the innovator of privilege management solutions, allows organizations to discover user accounts and groups that are members of the local “administrators” built-in user group on computers in their Windows system domains.

Facing today's unprecedented security threats, organizations of all sizes in all industries around the globe are asking the same basic question: How do we start a project like this? IT managers must have a planned approach to tackle this issue. Viewfinity answers this and the daunting question "Do you even know who has the local admin and application rights?"

"The Local Admin Discovery tool from Viewfinity allowed me to effectively gauge our IT department's progress in eliminating local administrators on our client systems," said Melissa S. Yee, Technical Analysis Advisor, Dell Services.

Andrew Barrett, Information Technology Officer for Scholle Packaging, explained, “Once our migration to Windows 7 was underway, we embarked on another major initiative which was to eliminate administrative rights from all endpoints. The first step was to get an accurate picture of who had local administrative rights. This was very important to understand because we have legacy applications in our environment that require administrative rights to run and we didn’t want to impede user productivity by prematurely removing those rights.

“We came across the Viewfinity Local Admin Discovery Tool. It identified which user accounts and groups were members of our local “Administrators” in our Windows domain. Having this information allowed us to quickly reassess who should have these rights, and easily remove those who shouldn’t have admin rights. This tool was instrumental in helping us approach our removal of administrative rights in an efficient, non-disruptive manner,” Barrett said.

Being a local Administrator presents an unwelcomed opportunity for damage to been done to the computer, either intentionally or accidentally, thus causing additional troubleshooting and repair work for IT and downtime for the end users. Often the damage, such as a virus or malware invasion, may even jeopardize other computers in a network as well. Having detailed information related to which users and groups have administrator rights on corporate desktops allows organizations to reassess who should have these rights. Once the analysis has been run, IT Administrators can take action, if needed, by removing the users or suspicious groups from the Administrators group.

To date, more than 1,600 IT security professionals have downloaded the Viewfinity Local Admin Discovery tool. It is available at https://www.viewfinity.com/Resources/Discover_Desktops.aspx, and is also available on a wide range of free download sites on the web.

About Viewfinity

Viewfinity provides privilege management and application control for desktops, laptops and servers, empowering enterprises to meet compliance mandates, reduce security risks, and lower IT costs. The Viewfinity solution allows enterprises to control end user and privileged user rights for applications and systems which require elevated permissions. Viewfinity's granular-level control enables companies to establish and enforce consistent policies for least privilege Windows-based environments based on segregation of duties. For more information, visit www.viewfinity.com.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Threat Intel Today
Threat Intel Today
The 397 respondents to our new survey buy into using intel to stay ahead of attackers: 85% say threat intelligence plays some role in their IT security strategies, and many of them subscribe to two or more third-party feeds; 10% leverage five or more.
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-5208
Published: 2014-12-22
BKBCopyD.exe in the Batch Management Packages in Yokogawa CENTUM CS 3000 through R3.09.50 and CENTUM VP through R4.03.00 and R5.x through R5.04.00, and Exaopc through R3.72.10, does not require authentication, which allows remote attackers to read arbitrary files via a RETR operation, write to arbit...

CVE-2014-7286
Published: 2014-12-22
Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via unspecified vectors.

CVE-2014-8015
Published: 2014-12-22
The Sponsor Portal in Cisco Identity Services Engine (ISE) allows remote authenticated users to obtain access to an arbitrary sponsor's guest account via a modified HTTP request, aka Bug ID CSCur64400.

CVE-2014-8017
Published: 2014-12-22
The periodic-backup feature in Cisco Identity Services Engine (ISE) allows remote attackers to discover backup-encryption passwords via a crafted request that triggers inclusion of a password in a reply, aka Bug ID CSCur41673.

CVE-2014-8018
Published: 2014-12-22
Multiple cross-site scripting (XSS) vulnerabilities in Business Voice Services Manager (BVSM) pages in the Application Software in Cisco Unified Communications Domain Manager 8 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCur19651, CSCur18555, CSCur1...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Join us Wednesday, Dec. 17 at 1 p.m. Eastern Time to hear what employers are really looking for in a chief information security officer -- it may not be what you think.