Re: Need assistance in testing Nessus

On Fri, Nov 17, 2006 at 02:29:03PM -0800, Christina Davis wrote:

> We have downloaded and installed the free version of Nessus 3 for Windows
> to test in our environment. It looks like it would be a useful tool for
> audit purposes. We are able to run port scans, but not retrieve windows
> user information using the Windows: user management plug in family. We were
> wondering if this is only available with the subscription, or are we
> missing something here..  

Nessus 3 for Windows is distributed with checks in the "Windows : User 
management" family. Even if you don't have a registered / direct feed, 
you can still use them. As Tim Doty already mentioned, make sure you 
provide credentials to log on to Windows machines remotely. With the 
Windows server, you do this by first adding a new policy and then 
editing the settings for credentials as discussed in our white paper here:

  http://www.nessus.org/documentation/nessus_credential_checks.pdf

Btw, note that while you can technically continue to use the download, 
you will not get any updates / new plugins that we write unless you 
register or purchase a direct feed. And our compliance checks are only 
available to direct feed customers.

George
--
theall@tenablesecurity.com
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus