0
votes
0answers
32 views

Why AD DS user is able to write to ADLDS(ADAM) container(user is neither imported nor added as foreignsecurityprincipal)?PS/dsacls cmd to fix it-DENY

I have installed 'AD LDS' instance on one of my windows server 2012 which is part of a domain. I brought few users (windows security principals to 'AD LDS') as 'ForeignSecurityPrincipals' from AD DS ...
5
votes
1answer
266 views

How can I list hidden administrative shares using PowerShell?

I'm trying to write a script that will audit shared folders on a few HIPAA-sensitive servers. I'm getting a list of shares just fine using gwmi Win32_Share, however when I go to get the permissions on ...
2
votes
1answer
174 views

Get PowerShell warning about scripts back

I've found several questions about how to suppress warnings like this: Security Warning Run only scripts that you trust. While scripts from the Internet can be useful, this script can ...
2
votes
1answer
119 views

Remote disk monitoring with WMI without admin rights

I am setting up a restricted WMI group that should be able to read WMI information from my remote hosts. I have the group set up as member of the remote DCOM and performance monitor groups. I also ...
4
votes
1answer
236 views

Security Concerns with Enabling Unrestricted PowerShell Remoting

I'd like to propose to the IT department at my organization that we enable PowerShell remoting on our production machines to make administering them easier. I feel that unrestricted access would be ...
2
votes
2answers
2k views

Listing Users using RDP

Windows Server 2008 R2 I'm trying to use PowerShell to get me a list of users who have logged into Remote Desktop Services (formerly known as Terminal Services) during the past day. With little ...
1
vote
1answer
406 views

Enable-PSRemoting: Is there security threats?

I have two production servers (Windows Server 2008, Terminal Servers) and I would like to enable PowerShell remoting commands on those servers. Is there a security threat one should consider before ...
2
votes
1answer
4k views

Powershell - Query remote Local Security Policy?

I am looking to remotely query a list of servers, to ensure they are "set up" correctly One of the things I want to check is the Local Security Policy -> User Rights Assignment ->Deny Log on through ...
0
votes
1answer
266 views

Getting error when trying to retrieve a security Descriptor from a Win32_Service class

I'm trying to retrieve the security descriptor of a Win32 Service. For that, I'm doing, in PowerShell, $sd = (Get-WmiObject -class Win32_Service | ?{$_.Name -like ...
0
votes
1answer
1k views

How to set Windows Services permissions from Powershell?

I need to grant a specific account SERVICE_START permissions for a given Windows service. There seems to be some methods for doing so here, but would prefer a method that's native to PowerShell and ...
1
vote
2answers
2k views

How to configure winrs for localhost?

On executing commands on localhost I get Access Denied error as follows PS C:\Windows\System32> winrs -r:localhost dir Winrs error:Access is denied. PS C:\Windows\System32> Followig is my ...
1
vote
0answers
174 views

Is there Powershell way to re-apply a restored password for the IIS IUSR account?

On one of our IIS web servers the IUSR account suddenly expired or got corrupted, I recovered the password from the IIS metabase (using Cscript adsutil.vbs get w3svc\anonymoususerpass after switching ...
0
votes
4answers
247 views

Windows 2008 unable to execute c'# powershell app. Retuning access exception

Does anybody know why I can't access the folder where my powershell scripts are in windows 2008 Ent. When I try to create a script with textpad it craps out. When I try and execute a c# powershell ...