Can anyone please tell how they go about auditing their Windows 2000 network system. Is there audit software from vendors for this or is a Windows utility available. If using a Windows utility can an Auditor get "rights" to that with "read only" capability. This is especially important for reviewing the "security", "application", and other logs available to users with "administrator" rights. Any help would be appreciated. Thank you.

We use kane Security Analyst. I'm not sure if it is still available, but it has worked very well for pulling information from our servers. Was recommended by our outside IT Auditors. We continue maintenance on it, so it may still be available.

Security Analyst

Contact vendor and ask.

Microsoft's Baseline Security Analyzer (MBSA) is also a useful tool. It's helpful for determining server and workstation configurations remotely. You can take a sample of each and see if they are lacking patches, updates, or have holes such as enabled guest accounts.