looking for a script that detects computers on the network w/out windows updates

[amdskip]

I've heard of a script like this and I did some searching but could not find anything. We are cracking down things in the dorm and looking for computers without the proper updates.

 

[Smilin]

You are wanting the Microsoft Baseline Security Analyzer. MBSA is a free download from microsoft. It's designed for what you are trying to do.

 

[kursplat]

wouldn't you need access permissions setup on the comps your scanning ? what if i don't have anything shared and no password set . let alone I'm running win95 on my old p2-233 with all the ports open and kazaa 24\7 ?
i can't see how you can audit EVERY comp in the dorm without physical access.

looking for a script that detects computers on the network w/out windows updates

also i'm wondering why you aren't concerned about any other company's OS that isn't locked down properly.
i'm not trying to crap your thread but it doesn't seem plausible without you having a say in every comp that is connected to the network.
good luck

edit : about MSBL

 

[amdskip]

I work for the school and if they are connected to our network without proper updates, we are turning their ports off. This script has sucessfully been used on campus already so I know it works.

Edit: I can browse the network and see the different workgroups but is there any way to get their ip addresses? I'm just guessing ranges right now and its working. I'm doing this mainly for curiousity as I can't contact the people as I'm not authorized to do that. I can though get a general idea on how many problems exist in this area of the campus.

 

[Woodie]

try eEye.com or atstack.com or nessus or nmap...there's a lot of information you can capture about a client, w/o admin privileges. Based on that, you can figure out which machines are worth looking at more closely. (the ones w/ P2P on, ftp on, etc..)

Since you work for the school, you should be able to get the IP subnets that are assigned to various buildings/floors. To get the ip addresses:
start-run-cmd:
ping -a computername or
nslookup computername or
net view computername and then do a netstat and netstat -n

 

[Sunner]

Try Nessus, it can scan entire subnets for known vulnerabilities.
As a plus, you'll catch many known flaws with third party software as well.

 

[spyordie007]

Originally posted by: Sunner
Try Nessus, it can scan entire subnets for known vulnerabilities.
As a plus, you'll catch many known flaws with third party software as well.

Bah, requires running on unix/linux. No native windows support.

 

[InlineFive]

Originally posted by: spyordie007

Originally posted by: Sunner
Try Nessus, it can scan entire subnets for known vulnerabilities.
As a plus, you'll catch many known flaws with third party software as well.

Bah, requires running on unix/linux. No native windows support.

CygWin a possible solution?

 

[kursplat]

We are cracking down things in the dorm and looking for computers without the proper updates.

I'm doing this mainly for curiosity as I can't contact the people as I'm not authorized to do that.

are you just doing this on your own as a vigilante or are you an actual system admin with time to kill ? because it seems to me , either way, if part of the user agreement with the students doesn't cover this type of thing or your not really the one who's supposed to be doing this, you and the school are wide open to a lawsuit . i would think if your tired of people who don't keep their OS and virus defs up to date , education would be a better way to go.

 

[Sunner]

Originally posted by: spyordie007

Originally posted by: Sunner
Try Nessus, it can scan entire subnets for known vulnerabilities.
As a plus, you'll catch many known flaws with third party software as well.

Bah, requires running on unix/linux. No native windows support.

Oh come on, you know you want some of that UNIX-like lovin'

 

[drag]

Originally posted by: Sunner

Originally posted by: spyordie007

Originally posted by: Sunner
Try Nessus, it can scan entire subnets for known vulnerabilities.
As a plus, you'll catch many known flaws with third party software as well.

Bah, requires running on unix/linux. No native windows support.

Oh come on, you know you want some of that UNIX-like lovin'

How can any network administration workstation not include any *nix.. even in dual-boot?

 

[Sunner]

Originally posted by: drag

Originally posted by: Sunner

Originally posted by: spyordie007

Originally posted by: Sunner
Try Nessus, it can scan entire subnets for known vulnerabilities.
As a plus, you'll catch many known flaws with third party software as well.

Bah, requires running on unix/linux. No native windows support.

Oh come on, you know you want some of that UNIX-like lovin'

How can any network administration workstation not include any *nix.. even in dual-boot?

If you only admin Windows boxes?

 

[Crusty]

Originally posted by: Sunner

Originally posted by: drag

Originally posted by: Sunner

Originally posted by: spyordie007

Originally posted by: Sunner
Try Nessus, it can scan entire subnets for known vulnerabilities.
As a plus, you'll catch many known flaws with third party software as well.

Bah, requires running on unix/linux. No native windows support.

Oh come on, you know you want some of that UNIX-like lovin'

How can any network administration workstation not include any *nix.. even in dual-boot?

If you only admin Windows boxes?

Yeah, but it's a University Network, there are bound to be CS/EE/CE Majors that have linux installed.

 

[drag]

Linux in a situation like this is nice to have anyways. Their are a large number of free software network and security analizing tools that only work in linux or at least work best under linux. That way you can get nice software without having to go thru a budgetory proccess for buying all these hacker-ish tools for you windows stuff. Plus you can leave some headless old boxes around here and their on the network running linux (while running nessusd deamons for the nessus scans for instance) that you can use to help figure out network issues without having to commendering some guy's desktop. (like if you have to deal with internal firewalls and routers seperating parts of the network you have to watch and stuff like that.)

I would expect access to a couple windows boxes, too, if all I had othewise was linux. It's just nice to be as flexible as possible. That's all.