On Jan 6, 2006, at 3:27 PM, Darko Gavrilovic wrote:

Hello. I am scanning subnets with WinXP clients. I would like to use a scanning account that is not an administrator account on the local machine. Preferably a regular user account with spcial permissions to local registry. Is there a listing of what local GPO settings we have to tweak?


http://www.nessus.org/documentation/nessus_credential_checks.pdf

An administrator account is better. It will allow you to access "C $" (or any administrator share) to get the file version instead of doing a registry check. This is useful for Windows patches but for some other softwares too (Opera, CA vet, Flash, RealPlayer, MSSQL, ...).

Nicolas
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to