TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
I would try talking to the proper authorities, starting with the system administrators, and explain to them the necessity and benefits of performing vulnerability scans. Explain what you would like to do and how you plan on going about it. Demonstrate the tools if need be and coordinate with them to ensure that the tests are run properly/safely. If the sys admins are unresponsive take the issue up the chain of command, tweaking the presentation to fit the audience. If you find that there isn't any executive buy in for vulnerability scanning that is a different battle. The other answer is, root access is required to perform some tests no matter what tools you use or what platform you are testing. I consider Windows 9x as providing root access to everyone. Regards, Steve -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Connell, Christine Sent: Wednesday, March 13, 2002 9:41 AM To: '[EMAIL PROTECTED]' Subject: Internet Scanner checks requiring admin access TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ---------------------------------------------------------------------------- In the ISS Knowledgebase (reference 010720-000001) there is an article listing 125 ISS checks requiring administrative privileges on the scanned host. (Of these 39 - almost a third - are "High Risk") According to the Knowledgebase article, "absense of these privileges will result in the check not being performed and a false negative for vulnerable hosts." In my environment, it is difficult to obtain an admin account for scanning systems. (And it can't be just here that sysadmins are paranoid about security folk with scanners) I'm curious to know what strategies other use to work around this resistance. Thanks! Christine Connell [EMAIL PROTECTED]
