Windows sysinternals

Chapter 8 Security Utilities 277
You can hide one or more entries by right-clicking an entry and choosing Exclude. The
selected entry and any others that begin with the same text will be hidden from the display.
For example, if you exclude C:\Folder, then C:\Folder\Subfolder will also be hidden.
Click the Save button to save the list contents to a tab-delimited Unicode text file. Choose
Compare To Saved from the File menu to display the differences in permissions between the
current list against a previously saved file. You can use this feature to verify the configuration
of one system against that of a baseline system.
ShareEnum
An aspect of Windows network security that is often overlooked is file shares. Lax security
settings are an ongoing source of security issues because too many users are granted
unnecessary access to files on other computers. If you didn’t specify permissions when
creating a file share in Windows, the default used to be to grant Everyone Full Control. That
was later changed to grant Everyone just Read access, but even that might expose sensitive
information to more people than those who should be authorized.
Windows provides no utilities to list all the shares on a network and their security settings.
ShareEnum fills that void, giving you the ability to enumerate all the file and printer shares in
a domain, an IP address range, or your entire network to quickly view the share permissions
in a table view, and to change the permissions on those shares.
Because only a domain administrator has the ability to view all network resources,
ShareEnum is most effective when you run it from a domain administrator account.
ShareEnum is a GUI utility and doesn’t accept any command line parameters (other than
/ accepteula). From the drop-down list, select , which scans your entire
network, , which lets you select a range of addresses to scan, or the name
of a domain. Click Refresh to scan the selected portion of your network. If you selected
, you will be prompted to enter a range of IP addresses to scan.
ShareEnum displays share information in a list view, as shown in Figure 8-3.
FIGURE 8-3 ShareEnum.
www.it-ebooks.info