It' another app that you have to threat vector

Gee..what's this?
An upatched security issue in Outlook.

Network Security, Vulnerability Assessment, Intrusion Prevention:
http://www.eeye.com/html/research/upcoming/20050505.html

What version?

Don't know do we?  What method can they attack from?  Don't know yet, do we?

Now... do you want that on your domain controller?  Keys to your kingdom?

Grab the Threats and countermeasures guide... it prob says something generic like reduce services on DCs or something.....





Frank Abagnale wrote:

Hi Jorge/Neil,
I agree, there are alternative ways of notifying the service team via scripting however, the manager is intent on using Outlook on the DC's, I was looking for reasons why this wasn't a good idea security wise, though looking on google etc I couldn't find anything concrete. thanks Frank

*/"Almeida Pinto, Jorge de" <[EMAIL PROTECTED]>/* wrote:

    Sometimes I wonder where managers hear that kind of stuff...

    If the backup program has the possibility to report if the status
    of a backup is "OK" or "FAILED", then that backup util will most
    probably have an option to send and e-mail. If it does not have
    that option but it has an option to run a program after the backup
    completed you could run a script which sends a log or whatever.
    For example scripts see:
    
http://www.microsoft.com/technet/scriptcenter/scripts/message/smtpmail/default.mspx

    There is no need to install Outlook for this... (which IMHO
    opinion would not be a good idea, installing outlook on a dc)

    Cheers,
    Jorge

    ________________________________

    From: [EMAIL PROTECTED] on behalf of Frank Abagnale
    Sent: Thu 11/24/2005 5:39 PM
    To: Active
    Subject: [ActiveDir] Outlook installed on a DC


    Hi all,

    I have a problem whereby our I've been asked by a manager to
    install outlook on our DC's to allow us to email back the services
    team when backups have failed.

    I am dead against this, I have just managed to split the DC & File
    and Print roles and reduce the number of domain admins.

    My gut feeling is against this, though I have no technical reason
    why this is bad?

    Does anyone have any views or advice on this matter?
    Any scenerio's that could occur would be nice...

    thanks
    Frank

    ________________________________

    Yahoo! Music Unlimited - Access over 1 million songs. Try it free.


    This e-mail and any attachment is for authorised use by the
    intended recipient(s) only. It may contain proprietary material,
    confidential information and/or be subject to legal privilege. It
    should not be copied, disclosed to, retained or used by, any other
    party. If you are not an intended recipient then please promptly
    delete this e-mail and any attachment and all copies and inform
    the sender. Thank you.


------------------------------------------------------------------------
Yahoo! Music Unlimited - Access over 1 million songs. Try it free. <http://pa.yahoo.com/*http://us.rd.yahoo.com/evt=36035/*http://music.yahoo.com/unlimited/>


List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to