Hello, I see that Nessus has the ability to query various Windows functions if it is provided authentication information. I don't want to use the domain administrator account for obvious security reasons. If I set up a dedicated domain account, what are the bare minimum permissions I would need to give it to be able to use Nessus to gather things like patch information? Given such permissions, what harm could still be done if the id were compromised? <html> <body> <p>***********************************************************************</p> <p>The information in this email is confidential and may be legally privileged. It is intended solely for the addressee. Access to this email by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. When addressed to our clients any opinions or advice contained in this email are subject to the terms and conditions expressed in the governing KPMG client engagement letter.</p> <p>***********************************************************************</p> </body> </html>
_______________________________________________ Nessus mailing list [email protected] http://mail.nessus.org/mailman/listinfo/nessus
