Re: Username Discovery

[sfmailsbm () gmail com]

You can user Microsoft Baseline Security Analyser, it checks list of admin users on the box, and checks for weak 
passwords

MBSA requires admin rights on the machine it scans though, if your machines are on a AD Domain, you can run the tool as 
a Domain Admin

GFI Network scanner can also be used, it gives u list of users, but does not test for weak passwords

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------