vbscript security

Hello,
we have a very big environment (600 DC, 16.000 ws) and we are making most of
the admin related tasks automatically by using scripts. In our scripts, we
have to write a domain admin account name and its password. We are using
lsrunase.exe utility and conerting our script into exe. Most of the security
people say this way is not secure. Is there any other way to make our
scripts much more secure?
Thanik in advance.
Atilla Gultekin.

E
Fri Mar 30 07:59:07 CDT 2007

Atilla Gultekin wrote:
> Hello,
> we have a very big environment (600 DC, 16.000 ws) and we are making most of
> the admin related tasks automatically by using scripts. In our scripts, we
> have to write a domain admin account name and its password. We are using
> lsrunase.exe utility and conerting our script into exe. Most of the security
> people say this way is not secure. Is there any other way to make our
> scripts much more secure?
> Thanik in advance.
> Atilla Gultekin.
>
>
I would ask your security people what the specific concern is. Also, you might ask how
they recommend. One thing might do is create a seperate domain admin account that does
not allow console logins. Atleast this way, if it is compromised, the attacker is
inconvenienced. Also, you could deny this account the ability to change/unlock accounts,
which can be complicated depending on you OU's etc. You might also open the compiled file
in a hex editor, and search for the password. If you don't find the password, you have a
basic level of security. Without knowing the tools you are using, my guess is that this
is true.