Analytics
12/13/2012
12:15 PM
Dark Reading
Dark Reading
Products and Releases
Connect Directly
RSS
E-Mail
50%
50%

Free Local Admin Discovery Tool First Step In Locking Down Admin Rights

Viewfinity tool discovers who has local admin and application rights

Waltham, MA – December 11, 2012 – The free Local Admin Discovery Tool from Viewfinity (www.viewfinity.com), the innovator of privilege management solutions, allows organizations to discover user accounts and groups that are members of the local “administrators” built-in user group on computers in their Windows system domains.

Facing today's unprecedented security threats, organizations of all sizes in all industries around the globe are asking the same basic question: How do we start a project like this? IT managers must have a planned approach to tackle this issue. Viewfinity answers this and the daunting question "Do you even know who has the local admin and application rights?"

"The Local Admin Discovery tool from Viewfinity allowed me to effectively gauge our IT department's progress in eliminating local administrators on our client systems," said Melissa S. Yee, Technical Analysis Advisor, Dell Services.

Andrew Barrett, Information Technology Officer for Scholle Packaging, explained, “Once our migration to Windows 7 was underway, we embarked on another major initiative which was to eliminate administrative rights from all endpoints. The first step was to get an accurate picture of who had local administrative rights. This was very important to understand because we have legacy applications in our environment that require administrative rights to run and we didn’t want to impede user productivity by prematurely removing those rights.

“We came across the Viewfinity Local Admin Discovery Tool. It identified which user accounts and groups were members of our local “Administrators” in our Windows domain. Having this information allowed us to quickly reassess who should have these rights, and easily remove those who shouldn’t have admin rights. This tool was instrumental in helping us approach our removal of administrative rights in an efficient, non-disruptive manner,” Barrett said.

Being a local Administrator presents an unwelcomed opportunity for damage to been done to the computer, either intentionally or accidentally, thus causing additional troubleshooting and repair work for IT and downtime for the end users. Often the damage, such as a virus or malware invasion, may even jeopardize other computers in a network as well. Having detailed information related to which users and groups have administrator rights on corporate desktops allows organizations to reassess who should have these rights. Once the analysis has been run, IT Administrators can take action, if needed, by removing the users or suspicious groups from the Administrators group.

To date, more than 1,600 IT security professionals have downloaded the Viewfinity Local Admin Discovery tool. It is available at https://www.viewfinity.com/Resources/Discover_Desktops.aspx, and is also available on a wide range of free download sites on the web.

About Viewfinity

Viewfinity provides privilege management and application control for desktops, laptops and servers, empowering enterprises to meet compliance mandates, reduce security risks, and lower IT costs. The Viewfinity solution allows enterprises to control end user and privileged user rights for applications and systems which require elevated permissions. Viewfinity's granular-level control enables companies to establish and enforce consistent policies for least privilege Windows-based environments based on segregation of duties. For more information, visit www.viewfinity.com.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Must Reads - September 25, 2014
Dark Reading's new Must Reads is a compendium of our best recent coverage of identity and access management. Learn about access control in the age of HTML5, how to improve authentication, why Active Directory is dead, and more.
Flash Poll
Threat Intel Today
Threat Intel Today
The 397 respondents to our new survey buy into using intel to stay ahead of attackers: 85% say threat intelligence plays some role in their IT security strategies, and many of them subscribe to two or more third-party feeds; 10% leverage five or more.
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2003-1598
Published: 2014-10-01
SQL injection vulnerability in log.header.php in WordPress 0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the posts variable.

CVE-2011-4624
Published: 2014-10-01
Cross-site scripting (XSS) vulnerability in facebook.php in the GRAND FlAGallery plugin (flash-album-gallery) before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter.

CVE-2012-0811
Published: 2014-10-01
Multiple SQL injection vulnerabilities in Postfix Admin (aka postfixadmin) before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the pw parameter to the pacrypt function, when mysql_encrypt is configured, or (2) unspecified vectors that are used in backup files gene...

CVE-2012-5485
Published: 2014-09-30
registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via unspecified vectors, related to the admin interface.

CVE-2012-5486
Published: 2014-09-30
ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3 beta 1, allows remote attackers to inject arbitrary HTTP headers via a linefeed (LF) character.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Chris Hadnagy, who hosts the annual Social Engineering Capture the Flag Contest at DEF CON, will discuss the latest trends attackers are using.