This is exactly what I do for certain things.  Although, I thought
that they cleaned this up in a previous release.  At any rate, I
haven't noticed this behavior in my 2.2.1 install.

--

seth wright ([EMAIL PROTECTED])
windows engineer
540.568.2912 (office)
james madison university



On Tue, Jul 22, 2008 at 2:36 PM, Wagner, Jesse <[EMAIL PROTECTED]> wrote:
> This annoys me also.
>
> I'd suggest you create a locked down account with access to only WMI and if 
> your concerned further move the user/pass into the wmi script.
>
> Jesse
>
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of mshundal
> Sent: Monday, July 21, 2008 12:55 PM
> To: [email protected]
> Subject: [zenoss-users] alerting reveals windows credentials
>
> Hi there,
>
> I am currently evaluating zenoss using the vm appliance and so far so good 
> except for glitches here and there except i think i just found a major 
> security risk.
>
> The alerts based on WMI are reporting along with the command the credentials 
> used by Zenoss for windows machines. Now I know about utility accounts and 
> all but is it really neccessary to reveal any credentials at all in alerts???
>
> I tryed searching the forums but did not see anything along these lines... is 
> this new, known, worked on or noone cares for utlity accounts kinda deal?
>
>
>
>
> -------------------- m2f --------------------
>
> Read this topic online here:
> http://community.zenoss.com/forums/viewtopic.php?p=22718#22718
>
> -------------------- m2f --------------------
>
>
>
> _______________________________________________
> zenoss-users mailing list
> [email protected]
> http://lists.zenoss.org/mailman/listinfo/zenoss-users
> _______________________________________________
> zenoss-users mailing list
> [email protected]
> http://lists.zenoss.org/mailman/listinfo/zenoss-users
>
_______________________________________________
zenoss-users mailing list
[email protected]
http://lists.zenoss.org/mailman/listinfo/zenoss-users

Reply via email to