MOM 2005 account security reports

Archived from groups: microsoft.public.win2000.security (More info?)

For Windows 2003 domains, you can use the Active Directory command line
tools such as dsquery and dsget to find that information. For Windows 2000
domains, if you install Adminpak for Windows 2003 [download at MS site] on
an XP Pro domain member you can also use such tools. Windows 2000 domain
controllers however do not replicate the last logon timestamp and if you
have Windows 2000 domain controllers that information will have to pulled
from all the Windows 2000 domain controllers. SomarSoft has a free tool
called dumpsec that can also produce reports of some of the tasks you
specify while their not free product Hyena can do a lot more. I believe you
can download a full function version of Hyena for a time limited trial. The
links below may help. --- Steve

http://www.systemtools.com/somarsoft/
http://www.jsiinc.com/SUBO/tip7300/rh7330.htm
http://www.microsoft.com/windowsxp [...] _tools.asp

"GFowl" <GFowl@discussions.microsoft.com> wrote in message
news:4B916E3A-3546-478F-9E2A-5FA617437D4D@microsoft.com...
> IS there a report or at least a management pack that will produce
> information
> such as inactive accounts, last logon date, accounts with passwords set to
> never expire, locked accounts, etc. (the types of reports that make
> auditors happy!)?