Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Penetration Testing: Re: Exchange mail server settings - easy dump possible?

Re: Exchange mail server settings - easy dump possible?

From: David Wyatt <davidwyatt_at_gmail.com>
Date: Mon, 18 Jul 2005 16:31:45 -0700

There is a utility on your exchange server CD of use called exchdump.
We use this in PSS for Exchange support and it does a great job of
dumping configuration information for servers, mailboxes, connectors
and all sorts of AD objects.

 You can read about it and also get a link to download the latest
version from Microsoft here:
http://support.microsoft.com/default.aspx?scid=kb;en-us;839116

This is burned into the Exchange server CD and may be called exchutil
(former name for the utility).

-David Wyatt
Senior Technical Consultant

On 5/23/05, Petr.Kazil_at_eap.nl <Petr.Kazil_at_eap.nl> wrote:
>
> I've been playing with a trial version of Exchange Server 2003.
> Using the NIST, NSA and Microsoft security guidelines I'm getting a better
> idea of the relevant security settings.
> But it's a pain to click through all the relevant screens in the System
> Manager GUI.
>
> Is there a tool that dumps all the settings in one readable text file - for
> example like Dumpsec ?
> I haven't been able to find it yet.
>
> I have found and used the Exchange Best Practices Analyzer Tool, and it
> works fine and covers some of the relevant settings but (AFAIK) not all of
> them.
>
> Or are the settings stored in the registry, a config file or an XML-file
> with settings somewhere?
> I'm reluctant to try scripting, because I fear that the learning curve will
> be steep (I know VBscript but not the WMI/API interfaces I would probably
> need).
>
> I will search through my old WindowsITPro magazines and probably it will be
> in here somewhere ...
>
> Thanks for any suggestions.
> Petr
>
>
Received on Jul 18 2005

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]