Auditing in a Windows NT Environment

IDENTIFY SIGNIFICANT SYSTEMS

Ensure significant systems have been identified. Diagrams Obtain/prepare logical and physical diagrams of NT network, including LANs and WANs Obtain server physical location, and applications and data residing and processing on NT servers and workstations Primary servers - print, file, Win (holds netBios), etc. Document NT Domain Identify PDC, Backup Domain Controller Execute command NET VIEW (have to do at primary server) to list all computers in domain and network Document the Programs Document server and all directory locations of significant application programs and data within domain Verify directories exist Document flow of transactions between systems and nodes in network (traceroute command)