Analytics
12/13/2012
12:15 PM
Dark Reading
Dark Reading
Products and Releases
Connect Directly
RSS
E-Mail
50%
50%

Free Local Admin Discovery Tool First Step In Locking Down Admin Rights

Viewfinity tool discovers who has local admin and application rights

Waltham, MA – December 11, 2012 – The free Local Admin Discovery Tool from Viewfinity (www.viewfinity.com), the innovator of privilege management solutions, allows organizations to discover user accounts and groups that are members of the local “administrators” built-in user group on computers in their Windows system domains.

Facing today's unprecedented security threats, organizations of all sizes in all industries around the globe are asking the same basic question: How do we start a project like this? IT managers must have a planned approach to tackle this issue. Viewfinity answers this and the daunting question "Do you even know who has the local admin and application rights?"

"The Local Admin Discovery tool from Viewfinity allowed me to effectively gauge our IT department's progress in eliminating local administrators on our client systems," said Melissa S. Yee, Technical Analysis Advisor, Dell Services.

Andrew Barrett, Information Technology Officer for Scholle Packaging, explained, “Once our migration to Windows 7 was underway, we embarked on another major initiative which was to eliminate administrative rights from all endpoints. The first step was to get an accurate picture of who had local administrative rights. This was very important to understand because we have legacy applications in our environment that require administrative rights to run and we didn’t want to impede user productivity by prematurely removing those rights.

“We came across the Viewfinity Local Admin Discovery Tool. It identified which user accounts and groups were members of our local “Administrators” in our Windows domain. Having this information allowed us to quickly reassess who should have these rights, and easily remove those who shouldn’t have admin rights. This tool was instrumental in helping us approach our removal of administrative rights in an efficient, non-disruptive manner,” Barrett said.

Being a local Administrator presents an unwelcomed opportunity for damage to been done to the computer, either intentionally or accidentally, thus causing additional troubleshooting and repair work for IT and downtime for the end users. Often the damage, such as a virus or malware invasion, may even jeopardize other computers in a network as well. Having detailed information related to which users and groups have administrator rights on corporate desktops allows organizations to reassess who should have these rights. Once the analysis has been run, IT Administrators can take action, if needed, by removing the users or suspicious groups from the Administrators group.

To date, more than 1,600 IT security professionals have downloaded the Viewfinity Local Admin Discovery tool. It is available at https://www.viewfinity.com/Resources/Discover_Desktops.aspx, and is also available on a wide range of free download sites on the web.

About Viewfinity

Viewfinity provides privilege management and application control for desktops, laptops and servers, empowering enterprises to meet compliance mandates, reduce security risks, and lower IT costs. The Viewfinity solution allows enterprises to control end user and privileged user rights for applications and systems which require elevated permissions. Viewfinity's granular-level control enables companies to establish and enforce consistent policies for least privilege Windows-based environments based on segregation of duties. For more information, visit www.viewfinity.com.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Threat Intel Today
Threat Intel Today
The 397 respondents to our new survey buy into using intel to stay ahead of attackers: 85% say threat intelligence plays some role in their IT security strategies, and many of them subscribe to two or more third-party feeds; 10% leverage five or more.
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-0640
Published: 2014-08-20
EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote authenticated users to bypass intended restrictions on resource access via unspecified vectors.

CVE-2014-0641
Published: 2014-08-20
Cross-site request forgery (CSRF) vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to hijack the authentication of arbitrary users.

CVE-2014-2505
Published: 2014-08-20
EMC RSA Archer GRC Platform 5.x before 5.5 SP1 allows remote attackers to trigger the download of arbitrary code, and consequently change the product's functionality, via unspecified vectors.

CVE-2014-2511
Published: 2014-08-20
Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum WebTop before 6.7 SP1 P28 and 6.7 SP2 before P14 allow remote attackers to inject arbitrary web script or HTML via the (1) startat or (2) entryId parameter.

CVE-2014-2515
Published: 2014-08-20
EMC Documentum D2 3.1 before P24, 3.1SP1 before P02, 4.0 before P11, 4.1 before P16, and 4.2 before P05 does not properly restrict tickets provided by D2GetAdminTicketMethod and D2RefreshCacheMethod, which allows remote authenticated users to gain privileges via a request for a superuser ticket.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Three interviews on critical embedded systems and security, recorded at Black Hat 2014 in Las Vegas.