From the course: Advanced Pen Testing Techniques for Active Directory

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Active Directory security audit

Active Directory security audit

- [Instructor] Before we get into deep testing of Active Directory, we can usually take a more defensive approach and run a security audit across our domain. We can do this by browsing the Active Directory but this is a long and difficult road to take. There are a number of advanced commercial auditing packages, including Lepide's AD Auditor. Lepide do provide an open source simple tool to allow a domain administrator to check for admin privileges. As a demonstrator of their commercial Active Directory auditor, we can download this by registering with Lepide, which I've done. I'm on my domain workstation, so let's run the tool against our cybex.com domain. The tool's actually called users, AD users with admin privileges.exe but I've renamed it to Lepide.exe. So, we run Lepide and we'll enter cybex.com So, we run Lepide and we'll enter cybex.com and our administrative credentials, administrator, and our administrative…

Contents