I need to find a single machine that E-Eye's Conficker scanner says is
vulnerable. I know the IP address and I know the name, but I don't know
where this workstation is located. Any suggestions?
John-AldrichTile-Tools
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~
can't find anything else to use.
Good luck,
Jason
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Tuesday, March 31, 2009 8:15 AM
To: NT System Admin Issues
Subject: locating one machine
I need to find a single machine that E-Eye's Conficker scanner says is
vulnerable. I know
the owner to call you
4: remotely reboot or shutdown the PC and see who calls it in.
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Tuesday, March 31, 2009 8:15 AM
To: NT System Admin Issues
Subject: locating one machine
I need to find a single
:15 AM
To: NT System Admin Issues
Subject: locating one machine
I need to find a single machine that E-Eye's Conficker scanner says is
vulnerable. I know the IP address and I know the name, but I don't know where
this workstation is located. Any suggestions?
John-AldrichTile-Tools
I use SUP (screaming User Protocol) . Shut it down and see who complains.
From: Jason Morris [mailto:jmor...@mjmc.com]
Sent: Tuesday, March 31, 2009 9:22 AM
To: NT System Admin Issues
Subject: RE: locating one machine
When I'm tracking down a specific machine and have SNMP enabled switches
Net send [machine name or iP] CALL ME RIGHT AWAY OR YOUR MACHINE WILL
STERILIZE YOU.
Usually gets a response.
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Tuesday, March 31, 2009 9:15 AM
To: NT System Admin Issues
Subject: locating one machine
I need to find a single
Admin Issues
Subject: locating one machine
I need to find a single machine that E-Eye's Conficker scanner says is
vulnerable. I know the IP address and I know the name, but I don't know
where this workstation is located. Any suggestions?
John-AldrichTile-Tools
net send Call Me!
On Tue, Mar 31, 2009 at 9:14 AM, John Aldrich
jaldr...@blueridgecarpet.comwrote:
I need to find a single machine that E-Eye’s Conficker scanner says is
vulnerable. I know the IP address and I know the name, but I don’t know
where this workstation is located. Any
]
*Sent:* Tuesday, March 31, 2009 9:22 AM
*To:* NT System Admin Issues
*Subject:* RE: locating one machine
When I’m tracking down a specific machine and have SNMP enabled switches in
the area, I use my handy dandy SolarWinds tool SwitchPort Mapper. It lets me
know what is on each and every
Unfortunately, I'm also the Network guy. J And our switches are not managed
switches. L
John-AldrichTile-Tools
From: Christopher Bodnar [mailto:christopher_bod...@glic.com]
Sent: Tuesday, March 31, 2009 9:53 AM
To: NT System Admin Issues
Subject: RE: locating one machine
Not sure what
Issues ntsysadmin@lyris.sunbelt-software.com
To
NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com
cc
Subject
RE: locating one machine
Unfortunately, I?m also the Network guy. J And our switches are not
managed switches. L
From: Christopher Bodnar [mailto:christopher_bod
My answer below won't help right away. However, you should be able to
telnet/ssh to your switch(es) and take a look at your arp tables. This
will show which MAC addresses are attached to which ports. There are
several ways to get the MAC address from the target machine, including
PSEXEC and
,CompTIA A+, N+
-Original Message-
From: Terry Dickson [mailto:te...@treasurer.state.ks.us]
Sent: Tuesday, March 31, 2009 9:24 AM
To: NT System Admin Issues
Subject: RE: locating one machine
I would go into my firewall and stop all external traffic, then just set back
and see who calls
Message-
From: John Cook [mailto:john.c...@pfsf.org]
Sent: Tuesday, March 31, 2009 10:33 AM
To: NT System Admin Issues
Subject: RE: locating one machine
Shutdown \\computername /l then wait for the call - if no call, repeat until
angry user calls
John W. Cook
Systems Administrator
On Tue, Mar 31, 2009 at 9:14 AM, John Aldrich
jaldr...@blueridgecarpet.com wrote:
I need to find a single machine that E-Eye’s Conficker scanner says is
vulnerable. I know the IP address and I know the name, but I don’t know
where this workstation is located.
Remotely (re)set the local admin
AM
To: NT System Admin Issues
Subject: RE: locating one machine
Any chance the pc would have a soundcard enabled and speakers connected up?
:-)
Regards
Tony Patton
Desktop Operations Cavan
Ext 8078
Direct Dial 049 435 2878
email: tony.pat...@quinn-insurance.com
John Aldrich jaldr
it will report who is logged in (if
any)...
Brian
MCSE and stuff
-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Tuesday, March 31, 2009 8:15 AM
To: NT System Admin Issues
Subject: locating one machine
I need to find a single machine that E-Eye's
: Tuesday, March 31, 2009 9:22 AM
Subject: RE: locating one machine
1: I'm assuming your inventory records don't tell you who owns the machine..
2: connect to the admin share and look at the names in the Documents and
Settings folder, and call those people, starting of course with the most
You guys are cruel! :)
But it's fun listening to the ideas...
-Original Message-
From: John Cook [mailto:john.c...@pfsf.org]
Sent: Tuesday, March 31, 2009 9:33 AM
To: NT System Admin Issues
Subject: RE: locating one machine
Shutdown \\computername /l then wait for the call
as the
username and doesn't accept any password. I tried installing AVG from remote
and it wouldn't accept any credentials I gave it.
-Original Message-
From: Ben Scott [mailto:mailvor...@gmail.com]
Sent: Tuesday, March 31, 2009 10:46 AM
To: NT System Admin Issues
Subject: Re: locating one
Or run psloggedon against it and see what user account is logged into
it. ;)
-Original Message-
From: Sam Cayze [mailto:sam.ca...@rollouts.com]
Sent: Tuesday, March 31, 2009 11:18 AM
To: NT System Admin Issues
Subject: RE: locating one machine
You guys are cruel! :)
But it's fun
.
Or, remote desktop to the machine - I think it will report who is logged
in (if any)...
Brian
MCSE and stuff
-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Tuesday, March 31, 2009 8:15 AM
To: NT System Admin Issues
Subject: locating one machine
I need
Issues
Subject: Re: locating one machine
It should be times like these that you should think about having some sort
of inventory that details this sort of info, even if it something as simple
as a spreadsheet that you keep updated.
James
- Original Message -
From: Kim Longenbaugh
Insurance Company of America
Email: christopher_bod...@glic.com
Phone: 610-807-6459
Fax: 610-807-6003
_
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Tuesday, March 31, 2009 10:51 AM
To: NT System Admin Issues
Subject: RE: locating one machine
Probably not. I *think* I may
: locating one machine
It is live on the network? Responds to PING? What OS does AD say it is? Is
this a standalone machine? Can you get to the admin shares? Can you do
remote management to it?
Chris Bodnar, MCSE
Sr. Systems Engineer
Distributed Systems Service Delivery - Intel Services
It says:
Error opening HKEY_USERS for \\192.168.1.75
Unable to query resource logons
-Original Message-
From: Damien Solodow [mailto:damien.solo...@ibcschools.edu]
Sent: Tuesday, March 31, 2009 11:23 AM
To: NT System Admin Issues
Subject: RE: locating one machine
Or run psloggedon
Admin Issues
Subject: RE: locating one machine
It is live on the network and responds to pings. If I attempt to access the
Admin shares, it asks for a username and password, but the username is
hardcoded to machinename\guest and it wont' accept any passwords that I can
think of. Using Computer
Looks like someone plugged in a rogue machine on your LAN. Look at the switch
port and shut it down.
-Z.V.
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Tuesday, March 31, 2009 11:48 AM
To: NT System Admin Issues
Subject: RE: locating one machine
It is live on the network
He can't look at the switch port.
He doesn't have any managed switches.
Vue, Za wrote:
Looks like someone plugged in a rogue machine on your LAN. Look at the
switch port and shut it down.
--
Phil Brutsche
p...@optimumdata.com
~ Finally, powerful endpoint security that ISN'T a resource hog!
Subject: RE: locating one machine
Non-domain computer on your network it sounds like.
Got a network mapper? Like 3Com's Network supervisor? Free. Map it and you
will see the switch and port it is on. If you have remote administration to
that switch set up you can remote into the switch
someone plugged in a rogue machine on your LAN. Look at the
switch port and shut it down.
-Z.V.
*From:* John Aldrich [mailto:jaldr...@blueridgecarpet.com]
*Sent:* Tuesday, March 31, 2009 11:48 AM
*To:* NT System Admin Issues
*Subject:* RE: locating one machine
It is live on the network
and doesn't accept any password. I tried installing AVG from
remote
and it wouldn't accept any credentials I gave it.
-Original Message-
From: Ben Scott [mailto:mailvor...@gmail.com]
Sent: Tuesday, March 31, 2009 10:46 AM
To: NT System Admin Issues
Subject: Re: locating one machine
, 2009 10:46 AM
To: NT System Admin Issues
Subject: Re: locating one machine
On Tue, Mar 31, 2009 at 9:14 AM, John Aldrich
jaldr...@blueridgecarpet.com mailto:jaldr...@blueridgecarpet.com
wrote:
I need to find a single machine that E-Eye's Conficker scanner
says
...@blueridgecarpet.com]
Sent: Tuesday, March 31, 2009 10:54 AM
To: NT System Admin Issues
Subject: RE: locating one machine
It says:
Error opening HKEY_USERS for \\192.168.1.75
Unable to query resource logons
-Original Message-
From: Damien Solodow [mailto:damien.solo...@ibcschools.edu
On Tue, Mar 31, 2009 at 10:56 AM, John Aldrich
jaldr...@blueridgecarpet.com wrote:
Well, I have a sneaking suspicion it's a Windows 98 machine...
Ah, that's tough. Win 98 has almost nothing for remote management.
No remote registry, no admin shares, no Remote Desktop, can't use
PSExec, etc.
: Tuesday, March 31, 2009 12:47 PM
To: NT System Admin Issues
Subject: RE: locating one machine
Since you know the IP address, how about trying to force an IP conflict?
Since it's a '98 machine, it should also be vulnerable to a number of
attacks.
Find someway to disrupt communications, so the user
password. I tried installing AVG from remote
and it wouldn't accept any credentials I gave it.
-Original Message-
From: Ben Scott [mailto:mailvor...@gmail.com]
Sent: Tuesday, March 31, 2009 10:46 AM
To: NT System Admin Issues
Subject: Re: locating one machine
On Tue, Mar 31, 2009
On Tue, Mar 31, 2009 at 12:53 PM, Ben Scott mailvor...@gmail.com wrote:
Well, I have a sneaking suspicion it's a Windows 98 machine...
Ah, that's tough. Win 98 has almost nothing for remote management.
Wait a minute.
All the Conficker detectors I know of (which, admittedly, isn't
much)
, March 31, 2009 9:53 AM
To: NT System Admin Issues
Subject: RE: locating one machine
Not sure what size shop you are in, do you have a network group? Or is that
another hat that you wear ? If you do have network people, go to them with
the IP and MAC address. They should be able to track
Issues
Subject: Re: locating one machine
On Tue, Mar 31, 2009 at 12:53 PM, Ben Scott mailvor...@gmail.com wrote:
Well, I have a sneaking suspicion it's a Windows 98 machine...
Ah, that's tough. Win 98 has almost nothing for remote management.
Wait a minute.
All the Conficker detectors I know
On Tue, Mar 31, 2009 at 3:07 PM, John Aldrich
jaldr...@blueridgecarpet.com wrote:
Hmm... good point. If eEye's scanner finds it and says it's vulnerable
that means it must be at least a Win2k box. Any suggestions on how to find
that machine?
All the suggestions that people were making for
: Ben Scott [mailto:mailvor...@gmail.com]
Sent: Tuesday, March 31, 2009 3:29 PM
To: NT System Admin Issues
Subject: Re: locating one machine
On Tue, Mar 31, 2009 at 3:07 PM, John Aldrich
jaldr...@blueridgecarpet.com wrote:
Hmm... good point. If eEye's scanner finds it and says it's vulnerable
: Tuesday, March 31, 2009 12:58 PM
To: NT System Admin Issues
Subject: Re: locating one machine
On Tue, Mar 31, 2009 at 12:53 PM, Ben Scottmailvor...@gmail.com wrote:
Well, I have a sneaking suspicion it's a Windows 98 machine...
Ah, that's tough. Win 98 has almost nothing for remote management
: Tuesday, March 31, 2009 3:29 PM
To: NT System Admin Issues
Subject: Re: locating one machine
On Tue, Mar 31, 2009 at 3:07 PM, John Aldrich
jaldr...@blueridgecarpet.com wrote:
Hmm... good point. If eEye's scanner finds it and says it's vulnerable
that means it must be at least a Win2k box. Any
Well, I don't see a DHCP lease for it on the DHCP server that would seem
to suggest that it's static.
-Original Message-
From: John Cook [mailto:john.c...@pfsf.org]
Sent: Tuesday, March 31, 2009 3:39 PM
To: NT System Admin Issues
Subject: RE: locating one machine
Do you know
...
-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Tuesday, March 31, 2009 2:08 PM
To: NT System Admin Issues
Subject: RE: locating one machine
Hmm... good point. If eEye's scanner finds it and says it's vulnerable
that means it must be at least a Win2k box
-2746
MCSE, MCTS, MCP+I,CompTIA A+, N+
-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Tuesday, March 31, 2009 3:45 PM
To: NT System Admin Issues
Subject: RE: locating one machine
Well, I don't see a DHCP lease for it on the DHCP server that would
On Tue, Mar 31, 2009 at 3:44 PM, John Aldrich
jaldr...@blueridgecarpet.com wrote:
Yeah... Well, I already tried a domain-admin group member... my alternate
login. :-) Funny thing... it wouldn't let me supply a username when trying
to browse to the admin shares just a password.. Hmm...
District
- Original Message -
From: Ben Scott
[mailto:mailvor...@gmail.com]
To: NT System Admin Issues
[mailto:ntsysad...@lyris.sunbelt-software.com]
Sent: Tue, 31 Mar 2009
12:57:41 -0700
Subject: Re: locating one machine
On Tue, Mar 31, 2009 at 3:44 PM, John Aldrich
jaldr
Subject: RE: locating one machine
So by process of elimination you can subtract every machine with a DHCP
lease from the equation - how many does that leave?
John W. Cook
Systems Administrator
Partnership For Strong Families
315 SE 2nd Ave
Gainesville, Fl 32601
Office (352) 393-2741 x320
Cell (352
On Tue, Mar 31, 2009 at 4:10 PM, Matthew W. Ross
mr...@ephrataschools.org wrote:
It's slow, painful, and extremely painful for people ... that don't want to
be unplugged
Oh, geez, Shook is gonna have a field day with this one...
-- Ben
~ Finally, powerful endpoint security that ISN'T
.
:-(
-Original Message-
From: John Cook [mailto:john.c...@pfsf.org]
Sent: Tuesday, March 31, 2009 3:50 PM
To: NT System Admin Issues
Subject: RE: locating one machine
So by process of elimination you can subtract every machine with a DHCP
lease from the equation - how many does
.
:-(
-Original Message-
From: John Cook [mailto:john.c...@pfsf.org]
Sent: Tuesday, March 31, 2009 3:50 PM
To: NT System Admin Issues
Subject: RE: locating one machine
So by process of elimination you can subtract every machine with a DHCP
lease from the equation - how many does
A+, N+
-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Tuesday, March 31, 2009 4:10 PM
To: NT System Admin Issues
Subject: RE: locating one machine
Too many. Most of my Win9x machines, though, are in the 192.168.1.200+
range... to keep 'em from getting
On Tue, Mar 31, 2009 at 4:17 PM, John Cook john.c...@pfsf.org wrote:
There's a free to try package called EMCO Remote shutdown 3.0 which might do
what you need.
Exactly what does it do that the SHUTDOWN.EXE included with Windows
doesn't? Aside from leaving you $100 poorer, I mean? :)
--
, MCTS, MCP+I,CompTIA A+, N+
-Original Message-
From: Ben Scott [mailto:mailvor...@gmail.com]
Sent: Tuesday, March 31, 2009 4:25 PM
To: NT System Admin Issues
Subject: Re: locating one machine
On Tue, Mar 31, 2009 at 4:17 PM, John Cook john.c...@pfsf.org wrote:
There's a free to try
No. I wish we did at this point.
-Original Message-
From: Candee Vaglica [mailto:can...@gmail.com]
Sent: Tuesday, March 31, 2009 4:16 PM
To: NT System Admin Issues
Subject: Re: locating one machine
I might have missed this...
but do you have managed switches?
On Tue, Mar 31, 2009
. :-)
-Original Message-
From: Kim Longenbaugh [mailto:k...@colonialsavings.com]
Sent: Tuesday, March 31, 2009 3:49 PM
To: NT System Admin Issues
Subject: RE: locating one machine
Well, here's one more idea:
Call each user at your place of employment with a PC. Ask them to run
ipconfig and tell you
-
Two rules to success in life:
1. Never tell people everything you know.
-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org]
Sent: Tuesday, March 31, 2009 4:10 PM
To: NT System Admin Issues
Subject: Re: locating one machine
Horribly old-school method
.
Good Luck
-Original Message-
From: John Aldrich [mailto:jaldr...@blueridgecarpet.com]
Sent: Tuesday, March 31, 2009 1:34 PM
To: NT System Admin Issues
Subject: RE: locating one machine
No. I wish we did at this point.
-Original Message-
From: Candee Vaglica [mailto:can
60 matches
Mail list logo
