DUMPSEC, Enumerate logon servers

[Guest]

I've been running dumsec command line for a while successfully to get true last login times for users ... recently though three new Domain controllers were added to the domain.. Since then dumpsec has been failing to finish.. Running the GUI I can see that it 'hangs' while trying to enumerate logon servers. Could you please tell me what dumpsec uses to do this so I know what might need fixing. ps left running over weekend etc, only 5,000 users.

Thanks

[kstanush]

Re: DUMPSEC, Enumerate logon servers

I'm not sure that we can determine why this is happening in DumpSec. DumpSec uses the Windows browse list to get a list of domain controllers to enumerate. This can cause problems if the browse list is not complete or if corrupted.

Using DumpSec, I think there is a way to dump the users on each domain controller individually. You might want to try this to see if each DC is reachable.

If you have a copy of Hyena, I can determine what domain controllers are on the browse list, or show you another way to do this that might show where the problem is.

[Guest]

Re: DUMPSEC, Enumerate logon servers

hey kstanush Thanks for quick reply, I can list the users individually for each dc without problems, this problem only happens when the 'show true last login' is checked which is the important bit for us. The results are imported into a SQL database so I guess we could run a batch for each DC and the take the most recent date from each dc manually, would be nice to get it working probperly again. I will look into the browsing services and see if that ok.. Will also try to get Hyena on the server.. Can Hyena/exporter pro be run from command line like dumpsec?

[kstanush]

Re: DUMPSEC, Enumerate logon servers

Yes, Exporter Pro can be run from the command line and it can also dump the last logon information. But it does not use the browse list (unless you force it to). Assuming this is an AD domain, Exporter Pro uses AD to get a list of domain controllers.

If you download Hyena (Hyena comes with Exporter Pro), let us know so that we can show you how to configure last logon exporting.