Tip

Protect IIS with System Scanner

I am repeatedly amazed at the powerful tools that are bundled onto the CD of the Resource Kits for Microsoft products. I don't understand how many of these tools don't end up as native installed applications in the final product but rather reside as nearly forgotten treasures. The treasure I'm talking about in this tip is the System Scanner from the Windows 2000 Server Resource Kit tools.

System Scanner is a multi-functional tool that can be used to scan for a host of issues and numerous vulnerabilities, including:

  • Extensive system baseline capabilities, including file, registry, and user checks.
  • Browser-specific vulnerabilities.
  • Comprehensive Microsoft Internet Information Services and Microsoft Personal Web Server checks.
  • Checks for the presence of well-known TCP/IP-based services.
  • NetBIOS checks.
  • Java vulnerabilities.
  • Microsoft Office vulnerabilities.
  • Susceptibility to denial-of-service attacks.
  • Configuration of virus scanners.
  • Registry security checks.
  • User policy configuration checks.
  • Remote access checks and modem checks.

In addition to these built-in scanning features, you can also create your own custom scanning policies to search for just about anything. The power

Requires Free Membership to View

of System Scanner is derived both from its ability to be customized and its ability to scan not just the size and time stamp of files but also their content. System Scanner can analyze the Registry, the file system, services, processes, users, groups, and network shares.

System Scanner works by creating a profile of a system to use as a baseline. All future scans of the system are then compared against the baseline to detect changes and new problems. System Scanner also can be used to produce numerous types of reports, including vulnerabilities, service status, trends, and differentials.

The only drawback to System Scanner is that it will take a bit of time to learn and to customize. If you are already a script-oholic then System Scanner is made just for you.

For more information on System Scanner see the Windows 2000 Server Resource Kit as well as the following Microsoft Web site: support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B264178.

By the way, once installed, System Scanner has its own help file that includes extensive how-to information.


About the author
James Michael Stewart is a partner of ITinfo Pros, Inc., a technology-focused writing and training organization.


This was first published in March 2003

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

Disclaimer: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.