Period: Last 20 week(s) Generated: For: Internal Auditor InternalAuditor@ecora.com By: Ecora Auditor Professional 4.5 - Windows Module 4.5.8063.19200 Using: FFR Definition '' Description: A Fact-Finding report will show values greater than, less than, or unlike a threshold value you set. These reports are very surgical in their precision - you can pull precisely the data you need, but they also offer a wealth of data through hundreds of built-in reports created by experts. Table of Contents... 1 Collected Not-Collected Legend DEFAULT The value presented in the report was not directly reported by the target, but implied by the current value or lack of a value for the attribute *UA* Unavailable attribute. The current configuration or version of target platform does not provide a value for this attribute. More detail in logs *FC* Collection of value failed *NS* Value not selected for collection Table 1. *NULL* *NULL* *NULL* *NULL* ECORADEMO AUDITOR1 Administrators Auditor1\Administrator ECORADEMO AUDITOR1 Administrators ECORADEMO\Domain Admins ECORADEMO AUDITOR1 Administrators ECORADEMO\Ecora ECORADEMO AUDITOR1 Backup Operators *NULL* ECORADEMO AUDITOR1 Distributed COM Users *NULL* ECORADEMO AUDITOR1 Guests Auditor1\Guest ECORADEMO AUDITOR1 Guests Auditor1\IUSR_Auditor1 ECORADEMO AUDITOR1 HelpServicesGroup Auditor1\SUPPORT_388945a0 Powered by Ecora Auditor Professional 4.5 - Windows Module 4.5.8063.19200 Page 1 of 5
ECORADEMO AUDITOR1 IIS_WPG Auditor1\IWAM_Auditor1 ECORADEMO AUDITOR1 IIS_WPG NT AUTHORITY\NETWORK SERVICE ECORADEMO AUDITOR1 IIS_WPG NT AUTHORITY\SERVICE ECORADEMO AUDITOR1 IIS_WPG NT AUTHORITY\SYSTEM ECORADEMO AUDITOR1 Network Configuration Operators *NULL* ECORADEMO AUDITOR1 Performance Log Users NT AUTHORITY\NETWORK SERVICE ECORADEMO AUDITOR1 Performance Monitor Users NT AUTHORITY\SYSTEM ECORADEMO AUDITOR1 Power Users *NULL* ECORADEMO AUDITOR1 Print Operators *NULL* ECORADEMO AUDITOR1 Remote Desktop Users *NULL* ECORADEMO AUDITOR1 Replicator *NULL* ECORADEMO AUDITOR1 SQLServer2005MSFTEUser$Auditor1$MSSQLSERVER NT AUTHORITY\SYSTEM ECORADEMO AUDITOR1 SQLServer2005MSSQLServerADHelperUser$Auditor1 NT AUTHORITY\NETWORK SERVICE ECORADEMO AUDITOR1 SQLServer2005MSSQLUser$Auditor1$MSSQLSERVER NT AUTHORITY\SYSTEM ECORADEMO AUDITOR1 SQLServer2005NotificationServicesUser$Auditor1 *NULL* ECORADEMO AUDITOR1 SQLServer2005SQLAgentUser$Auditor1$MSSQLSERVER NT AUTHORITY\SYSTEM ECORADEMO AUDITOR1 SQLServer2005SQLBrowserUser$Auditor1 NT AUTHORITY\SYSTEM ECORADEMO AUDITOR1 TelnetClients *NULL* ECORADEMO AUDITOR1 Users Auditor1\ASPNET ECORADEMO AUDITOR1 Users ECORADEMO\Domain Users ECORADEMO AUDITOR1 Users NT AUTHORITY\Authenticated Users ECORADEMO AUDITOR1 Users NT AUTHORITY\INTERACTIVE ECORADEMO AUDITORMARKET Administrators AuditorMarket\Administrator ECORADEMO AUDITORMARKET Administrators ECORADEMO\Domain Admins ECORADEMO AUDITORMARKET Backup Operators *NULL* ECORADEMO AUDITORMARKET Distributed COM Users *NULL* ECORADEMO AUDITORMARKET Guests AuditorMarket\Guest ECORADEMO AUDITORMARKET HelpServicesGroup AuditorMarket\SUPPORT_388945a0 ECORADEMO AUDITORMARKET Network Configuration Operators *NULL* ECORADEMO AUDITORMARKET Performance Log Users NT AUTHORITY\NETWORK SERVICE ECORADEMO AUDITORMARKET Performance Monitor Users *NULL* ECORADEMO AUDITORMARKET Power Users *NULL* ECORADEMO AUDITORMARKET Print Operators *NULL* ECORADEMO AUDITORMARKET Remote Desktop Users *NULL* ECORADEMO AUDITORMARKET Replicator *NULL* Powered by Ecora Auditor Professional 4.5 - Windows Module 4.5.8063.19200 Page 2 of 5
ECORADEMO AUDITORMARKET TelnetClients *NULL* ECORADEMO AUDITORMARKET Users ECORADEMO\Domain Users ECORADEMO AUDITORMARKET Users NT AUTHORITY\Authenticated Users ECORADEMO AUDITORMARKET Users NT AUTHORITY\INTERACTIVE ECORADEMO AUDITORSE Administrators AuditorSE\Administrator ECORADEMO AUDITORSE Administrators ECORADEMO\Domain Admins ECORADEMO AUDITORSE Backup Operators *NULL* ECORADEMO AUDITORSE Distributed COM Users *NULL* ECORADEMO AUDITORSE Guests AuditorSE\Guest ECORADEMO AUDITORSE Guests AuditorSE\IUSR_AuditorSE ECORADEMO AUDITORSE HelpServicesGroup AuditorSE\SUPPORT_388945a0 ECORADEMO AUDITORSE IIS_WPG AuditorSE\IWAM_AuditorSE ECORADEMO AUDITORSE IIS_WPG NT AUTHORITY\NETWORK SERVICE ECORADEMO AUDITORSE IIS_WPG NT AUTHORITY\SERVICE ECORADEMO AUDITORSE IIS_WPG NT AUTHORITY\SYSTEM ECORADEMO AUDITORSE Network Configuration Operators *NULL* ECORADEMO AUDITORSE Performance Log Users NT AUTHORITY\NETWORK SERVICE ECORADEMO AUDITORSE Performance Monitor Users *NULL* ECORADEMO AUDITORSE Power Users *NULL* ECORADEMO AUDITORSE Print Operators *NULL* ECORADEMO AUDITORSE Remote Desktop Users *NULL* ECORADEMO AUDITORSE Replicator *NULL* ECORADEMO AUDITORSE TelnetClients *NULL* ECORADEMO AUDITORSE Users AuditorSE\ASPNET ECORADEMO AUDITORSE Users ECORADEMO\Domain Users ECORADEMO AUDITORSE Users NT AUTHORITY\Authenticated Users ECORADEMO AUDITORSE Users NT AUTHORITY\INTERACTIVE PORTSMOUTH CHILD-MBR1 Administrators CHILD-MBR1\Administrator PORTSMOUTH CHILD-MBR1 Administrators ECORADEMO\Domain Admins PORTSMOUTH CHILD-MBR1 Backup Operators *NULL* PORTSMOUTH CHILD-MBR1 Distributed COM Users *NULL* PORTSMOUTH CHILD-MBR1 Guests CHILD-MBR1\Guest PORTSMOUTH CHILD-MBR1 HelpServicesGroup CHILD-MBR1\SUPPORT_388945a0 PORTSMOUTH CHILD-MBR1 Network Configuration Operators *NULL* PORTSMOUTH CHILD-MBR1 Performance Log Users NT AUTHORITY\NETWORK SERVICE Powered by Ecora Auditor Professional 4.5 - Windows Module 4.5.8063.19200 Page 3 of 5
PORTSMOUTH CHILD-MBR1 Performance Monitor Users *NULL* PORTSMOUTH CHILD-MBR1 Power Users *NULL* PORTSMOUTH CHILD-MBR1 Print Operators *NULL* PORTSMOUTH CHILD-MBR1 Remote Desktop Users *NULL* PORTSMOUTH CHILD-MBR1 Replicator *NULL* PORTSMOUTH CHILD-MBR1 TelnetClients *NULL* PORTSMOUTH CHILD-MBR1 Users NT AUTHORITY\Authenticated Users PORTSMOUTH CHILD-MBR1 Users NT AUTHORITY\INTERACTIVE PORTSMOUTH CHILD-MBR1 Users PORTSMOUTH\Domain Users ECORADEMO MRBSRV1 Administrators ECORADEMO\Domain Admins ECORADEMO MRBSRV1 Administrators MRBSRV1\Administrator ECORADEMO MRBSRV1 Backup Operators *NULL* ECORADEMO MRBSRV1 DHCP Administrators *NULL* ECORADEMO MRBSRV1 DHCP Users *NULL* ECORADEMO MRBSRV1 Distributed COM Users *NULL* ECORADEMO MRBSRV1 Guests MRBSRV1\Guest ECORADEMO MRBSRV1 Guests MRBSRV1\IUSR_MRBSRV1 ECORADEMO MRBSRV1 HelpServicesGroup MRBSRV1\SUPPORT_388945a0 ECORADEMO MRBSRV1 IIS_WPG MRBSRV1\IWAM_MRBSRV1 ECORADEMO MRBSRV1 IIS_WPG NT AUTHORITY\NETWORK SERVICE ECORADEMO MRBSRV1 IIS_WPG NT AUTHORITY\SERVICE ECORADEMO MRBSRV1 IIS_WPG NT AUTHORITY\SYSTEM ECORADEMO MRBSRV1 Network Configuration Operators *NULL* ECORADEMO MRBSRV1 Performance Log Users NT AUTHORITY\NETWORK SERVICE ECORADEMO MRBSRV1 Performance Monitor Users *NULL* ECORADEMO MRBSRV1 Power Users *NULL* ECORADEMO MRBSRV1 Print Operators *NULL* ECORADEMO MRBSRV1 Remote Desktop Users *NULL* ECORADEMO MRBSRV1 Replicator *NULL* ECORADEMO MRBSRV1 TelnetClients *NULL* ECORADEMO MRBSRV1 Users ECORADEMO\Domain Users ECORADEMO MRBSRV1 Users MRBSRV1\ASPNET ECORADEMO MRBSRV1 Users NT AUTHORITY\Authenticated Users ECORADEMO MRBSRV1 Users NT AUTHORITY\INTERACTIVE ECORADEMO MRBSRV2 Administrators ECORADEMO\Domain Admins Powered by Ecora Auditor Professional 4.5 - Windows Module 4.5.8063.19200 Page 4 of 5
ECORADEMO MRBSRV2 Administrators MRBSRV2\Administrator ECORADEMO MRBSRV2 Backup Operators *NULL* ECORADEMO MRBSRV2 Distributed COM Users *NULL* ECORADEMO MRBSRV2 Guests MRBSRV2\Guest ECORADEMO MRBSRV2 HelpServicesGroup MRBSRV2\SUPPORT_388945a0 ECORADEMO MRBSRV2 Network Configuration Operators *NULL* ECORADEMO MRBSRV2 Performance Log Users NT AUTHORITY\NETWORK SERVICE ECORADEMO MRBSRV2 Performance Monitor Users *NULL* ECORADEMO MRBSRV2 Power Users *NULL* ECORADEMO MRBSRV2 Print Operators *NULL* ECORADEMO MRBSRV2 Remote Desktop Users *NULL* ECORADEMO MRBSRV2 Replicator *NULL* ECORADEMO MRBSRV2 TelnetClients *NULL* ECORADEMO MRBSRV2 Users ECORADEMO\Domain Users ECORADEMO MRBSRV2 Users NT AUTHORITY\Authenticated Users ECORADEMO MRBSRV2 Users NT AUTHORITY\INTERACTIVE ECORADEMO VISTAENTCLIENT Administrators ECORADEMO\Domain Admins ECORADEMO VISTAENTCLIENT Administrators VISTAENTCLIENT\Administrator ECORADEMO VISTAENTCLIENT Administrators VISTAENTCLIENT\ecora ECORADEMO VISTAENTCLIENT Backup Operators *NULL* ECORADEMO VISTAENTCLIENT Cryptographic Operators *NULL* ECORADEMO VISTAENTCLIENT Distributed COM Users *NULL* ECORADEMO VISTAENTCLIENT Event Log Readers *NULL* ECORADEMO VISTAENTCLIENT Guests VISTAENTCLIENT\Guest ECORADEMO VISTAENTCLIENT IIS_IUSRS NT AUTHORITY\IUSR ECORADEMO VISTAENTCLIENT Network Configuration Operators *NULL* ECORADEMO VISTAENTCLIENT Performance Log Users *NULL* ECORADEMO VISTAENTCLIENT Performance Monitor Users *NULL* ECORADEMO VISTAENTCLIENT Power Users *NULL* ECORADEMO VISTAENTCLIENT Remote Desktop Users *NULL* ECORADEMO VISTAENTCLIENT Replicator *NULL* ECORADEMO VISTAENTCLIENT Users ECORADEMO\Domain Users ECORADEMO VISTAENTCLIENT Users NT AUTHORITY\Authenticated Users ECORADEMO VISTAENTCLIENT Users NT AUTHORITY\INTERACTIVE Powered by Ecora Auditor Professional 4.5 - Windows Module 4.5.8063.19200 Page 5 of 5