Domain Controller

Content Authoring
1

(imported topic written by jpeppers91)

Does anyone have the relevance to identify domain controllers easily?

2

(imported comment written by BenKus)

How about this?

product type of operating system = nt domain controller product type

Ben

3

(imported comment written by gregv91)

Ben,

Another Domain controller related question. There are several analyses which pull information from registry keys, however on domain controller these values are not used, instead the DC relies on the local security database, which I believe is a binary file. Are there any inspectors to query these?

Thanks!

Greg

4

(imported comment written by BenKus)

Hey Greg,

Can you please let me know which analyses are you referring to?

Ben

5

(imported comment written by gregv91)

Ben,

The “Security Settings - Account Policies” analysis would be a good example. The values it returns on domain controllers are not the same ones as if someone logs onto the DC’s GUI and checks in Windows because BES is polling registry keys that aren’t used on DC’s. Instead the OS pulls these settings from the local security database (not a windows guru) and so BES is reporting the wrong values in theses cases…

Any ideas?