ActiveDirSec.Org

The world's most trusted forum on Active Directory Security


Post Info TOPIC: Is there an easy way to identify all trusts for which SID Filtering is turned off?


Member

Posts: 10
Date: Jun 22, 2011
Is there an easy way to identify all trusts for which SID Filtering is turned off?
Permalink  
 


Hello again,

One of the other things we are looking at is to identify all trusts on whom SID Filtering may be turned off. We understand the implications of SID Filtering being turned off, and thus wan to ensure and just check on a periodic basis as to if this setting may have changed on any of our external trusts.

If you guys monitor this on a periodic basis, could you please let me know how you do so in an efficient manner? I don't particularly like opening up the Trust Management MMC and looking at each trust individually each time we need to do so.

Thanks guys.

-Jimmy.



__________________
iPad Rocks!


Member

Posts: 7
Date: Jun 27, 2012
RE: Is there an easy way to identify all trusts for which SID Filtering is turned off?
Permalink  
 


Hi Jimmy, 

Yes, you can perform a simple LDAP search looking for TrustedDomain objects with the right paramters to make this determination. This should't take too long once you know what parameter-value combination to specify as the search criteria.

Guido.



__________________

If you can't explain it simply, you don't understand it well enough” - Albert Einstein



Member

Posts: 15
Date: Jun 27, 2012
RE: Is there an easy way to identify all trusts for which SID Filtering is turned off?
Permalink  
 


Hi Jimmy,

Have you looked at adfind? Its a really nifty utility and I'm almost certain could help you identify all trusts for which SID Filtering is turned off.

If you haven't looked at it, I'd consider giving it a shot.

Joe.



__________________
Don't mess with my Alienware!


Member

Posts: 6
Date: Jun 29, 2012
RE: Is there an easy way to identify all trusts for which SID Filtering is turned off?
Permalink  
 


Hi Jimmy,

Have you considered adinfo? It is a free tool, much like adfind,  but with a UI, and could help you identify all trusts for which SID Filtering is turned off.

Samuel. 



__________________


Member

Posts: 18
Date: May 30, 2013
RE: Is there an easy way to identify all trusts for which SID Filtering is turned off?
Permalink  
 


Guys, in case you can't decide between adinfo and adfind, there's a good discussion here.



__________________
Today is the tomorrow we worried about yesterday
Page 1 of 1  sorted by
Quick Reply

Please log in to post quick replies.

Post to Digg Post to Del.icio.us
Members Login
Username 
 
Password 
    Remember Me