Original Message: >On Fri, Nov 21, 2003 at 08:55:10PM +0100, [EMAIL PROTECTED] wrote: >> Hi nessus community, >> >> Recently I ran a nessus against a W2k Active Directory in native mode >> and noticed that >> >> - Domain Accounts with empty passwords or >> - Domain Accounts with password=username >> >> were not found, even if I provided nessus with a valid Admin account. > >Make sure that safe checks are disabled and that plugin #10404 are enabled. > >This plugin is marked as being dangerous as it may lock out some accounts in tightly >secured >environments.
I disabled safe checks and enabled 10404 and "Runtime dependencies". Nessusd.messages shows that the plugin is run. Again, the plugin finds these accounts when no AD is enabled. If AD is enabled it still enumerates the users but does not check find the passwords. Are other's out there experiencing this too? Kind regards tobias ______________________________________________________________________________ Horoskop, Comics, VIPs, Wetter, Sport und Lotto im WEB.DE Screensaver1.2 Kostenlos downloaden: http://screensaver.web.de/?mc=021110 _______________________________________________ Nessus mailing list [EMAIL PROTECTED] http://mail.nessus.org/mailman/listinfo/nessus
