Re: finding windows NT 4.0 server in a domain

[Nikhil Wagholikar <visitnikhil () gmail com>]

Hello Mzcohen,

One of the ways to find/discover Microsoft Windows NT 4.0 server is to
scan for ports 137/TCP, 138/UDP, 139/TCP and 445/TCP.

1. If you find Microsoft system having all these ports open or just
445/TCP open, it will be Microsoft Windows 2000 and later OS.

2. If you find Microsoft system having all the above mentioned ports
open except 445/TCP, it will be Microsoft Windows NT 4.0 OS.

As far as noise is concerned, you can perform these port scans using
manual 'Telnet <IP Address/Hostname> Port_No' command.

Reference: http://www.petri.co.il/whats_port_445_in_w2k_xp_2003.htm

Hope this helps!
---
Nikhil Wagholikar
Practice Lead | Security Assessment & Digital Forensics
Network Intelligence India Pvt. Ltd. [NII Consulting]
Web: http://www.niiconsulting.com/
Comprehensive Information Security Training
http://iisecurity.in/courses/Training Calendar.html

On 2 February 2010 04:45, <mzcohen2682 () aim com> wrote:
> HI,
> I need to scan a lan and detect windows nt 4.0 servers but I dont to make a lot of noise so which port I can scan and 
> It will tell me its a windows nt 4? I dont  want nmap to confuse and think its a windows 2000/2003 domain controller.
>
> thanks,
>
> Marco
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------