CONFIDENTIALITY NOTE: The information contained in this report document is for the exclusive use of the client specified above and may contain confidential, privileged and non-disclosable information. If the recipient of this report is not the client or addressee, such recipient is strictly prohibited from reading, photocopying, distributing or otherwise using this report or its contents in any way. Scan Date: 5/4/2018 Network Assessment Prepared for: KC Housing Authority Prepared by: NetStandard Inc. 5/7/2018 Full Detail Report
133
Embed
Prepared by: Full Detail Report · 2020. 3. 15. · 5.6 - Hyper-V Servers . Full Detail Report NETWORK ASSESSMENT ... External Security Vulnerabilities Lists the security holes and
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
CONFIDENTIALITY NOTE: The information contained in this report document is for the exclusive use of the client specified above and may contain confidential, privileged and non-disclosable information. If the recipient of this report is not the client or addressee, such recipient is strictly prohibited from reading, photocopying, distributing or otherwise using this report or its contents in any way. Scan Date: 5/4/2018
1 - Discovery Tasks This table contains a listing of all tasks which were performed as part of this assessment. Items which do not contain a check were not performed.
Task Description
Detect Domain Controllers Identifies domain controllers and online status.
FSMO Role Analysis Enumerates FSMO roles at the site.
Enumerate Organization Units and Security Groups Lists the organizational units and security groups (with members).
User Analysis Lists the users in AD, status, and last login/use, which helps identify potential security risks.
Detect Local Mail Servers Detects mail server(s) on the network.
Detect Time Servers Detects server(s) on the network.
Discover Network Shares Discovers the network shares by server.
Detect Major Applications Detects all major apps / versions and counts the number of installations.
Detailed Domain Controller Event Log Analysis Lists the event log entries from the past 24 hours for the directory service, DNS server and file replication service event logs.
Web Server Discovery and Identification Lists the web servers and type.
Network Discovery for Non-A/D Devices Lists the non-Active Directory devices responding to network requests.
Internet Access and Speed Test Tests the Internet access and performance.
SQL Server Analysis Lists the SQL Servers and associated database(s).
Internet Domain Analysis Queries company domain(s) via a WHOIS lookup.
System by System Event Log Analysis Discovers the five system and app event log errors for servers.
External Security Vulnerabilities Lists the security holes and warnings from External Vulnerability Scan.
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 5 of 133
2 - Assessment Summary Domain
Domain Controllers 2
Number of Organizational Units 25
Users
# Enabled 119
Last Login Within 30 Days 76
Last Login Older Than 30 Days 43
# Disabled 9
Last Login Within 30 Days 0
Last Login Older Than 30 Days 9
Security Group
Groups with Users 46
# Total Groups 89
Computers in Domain
Total Computers 42
Last Login Within 30 Days 24
Last Login Older Than 30 Days 18
Active Computers by OS
Microsoft Windows Server 2008 R2 Standard 7
Microsoft Windows XP 1
unknown 1
Windows 7 Professional 13
Windows Server 2008 R2 Standard 2
Miscellaneous
Non-A/D Systems 55
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 6 of 133
Miscellaneous
MX Records 0
MS SQL Servers 5
Web Servers 58
Printers 58
Exchange Servers 1
Network Shares 125
Installed Applications 349
Potential or Severe Security Risks 0
Potential Insecure Listening Ports 39
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 7 of 133
3 - Domain: KHA.ORG This section and corresponding sub-sections contain a comprehensive view of the domain.
3.1 - Domain Controllers This section contains a listing of all domain controllers and their corresponding status. Domain Controller Status
ADC01 online
ADC02 online
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 8 of 133
3.2 - FSMO Roles This section contains a listing of all FSMO (Flexible Single Master Operation) roles, which are needed to operate a Windows domain. Role Domain Controller Best Practice
Infrastructure Master ADC01.KHA.ORG Domain Specific
Domain Naming Master ADC01.KHA.ORG Forest Wide
PDC Emulator ADC01.KHA.ORG Domain Specific
Relative ID (RID) Master ADC01.KHA.ORG Domain Specific
Schema Master ADC01.KHA.ORG Forest Wide
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 9 of 133
3.3 - Organizational Units This section contains a hierarchical view of all organizational units from within Active Directory.
● kha.org
o Citrix Groups (10 Security Groups)
o Citrix Servers (3 Computers)
o Domain Controllers (2 Computers)
o Domain Groups (11 Security Groups)
o Domain Servers (5 Computers)
o Domain Users (109 Users)
o Admin Accounts (8 Users)
o Discontinued Accounts (13 Users)
o Elderly Ser (3 Users)
o Finance (2 Users)
o frontdesk (1 Users)
o Housing (12 Users)
o Local Workstation Users (6 Users)
o Maint (11 Users)
o Mod (5 Users)
o Off Site (15 Users)
o Sec 8 (7 Users)
o Service Accounts (10 Users)
o Supply (1 Users)
o Support Accounts (8 Users)
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 10 of 133
o HABINC (5 Users)
o Ten Sel (5 Users)
o test (2 Users)
o Domain Workstations (31 Computers)
o Microsoft Exchange Security Groups (16 Security Groups)
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 11 of 133
3.4 - Group Policy Objects This section contains a hierarchical view of all group policy objects from within Active Directory. Policies highlighted in green represent enabled policies.
● kha.org
o Builtin
o Citrix Groups
o Citrix Policy
o Citrix Servers (2-GPO, 2-Enabled)
o Citrix Disable SEP smcgui
o WSUS-Srvr
o Computers
o default
o Default Domain Controllers Policy
o Domain Controllers
o Domain Groups
o Domain Servers (1-GPO, 1-Enabled)
o WSUS-Srvr
o Domain Users (2-GPO, 2-Enabled)
o my doc redirect
o Printer Deployment
o Admin Accounts
o Discontinued Accounts
o Elderly Ser (1-GPO, 1-Enabled)
o Desktop Lockdown
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 12 of 133
o Finance (1-GPO, 1-Enabled)
o Desktop Lockdown
o frontdesk
o Housing (1-GPO, 1-Enabled)
o Desktop Lockdown
o Local Workstation Users (2-GPO, 2-Enabled)
o Default Domain Policy
o default no icons
o Maint (1-GPO, 1-Enabled)
o Desktop Lockdown
o Mod (1-GPO, 1-Enabled)
o Desktop Lockdown
o Off Site (1-GPO, 1-Enabled)
o Desktop Lockdown
o Sec 8 (1-GPO, 1-Enabled)
o Desktop Lockdown
o Service Accounts (1-GPO, 1-Enabled)
o my doc redirect
o Supply (1-GPO, 1-Enabled)
o Desktop Lockdown
o Support Accounts
o HABINC
o Ten Sel (1-GPO, 1-Enabled)
o Desktop Lockdown
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 13 of 133
o test (1-GPO, 1-Enabled)
o Desktop Lockdown
o Domain Workstations (1-GPO, 1-Enabled)
o Firewall
o ForeignSecurityPrincipals
o Local Desktop Lockdown
o Managed Service Accounts
o Microsoft Exchange Security Groups
o NO IE
o Remote Desktop
o System
o PSPs
o Users
o WSUS-WKS
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 14 of 133
3.5 - Users This section contains a list of accounts from Active Directory with information on each account. Disabled accounts are highlighted in gray. Inactive users, defined as those that have not logged in in 30 days to Active Directory, are highlighted in the Last Login column in RED BOLD. Accounts where passwords are set to never expire are highlighted in the Password Expires column in RED. Users with passwords that have expired are indicated in the Password Expires column in RED BOLD.
Active Users User Name Display Name Enabled Password Last Set Password Expires Last Login
KHA.ORG\wcsinc wcsinc enabled 12/30/2011 02:20 PM <never> 11/01/2012 11:51 AM
KHA.ORG\zacharia Niyigiraimbabazi Zacharia
enabled 04/22/2016 03:26 PM <never> 06/04/2016 12:18 AM
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 20 of 133
3.6 - Service Accounts This section contains a list of service accounts from Active Directory with information on each account.
Active Service Accounts User Name Display Name Enabled Password Last Set Password Expires Last Login
.\CTX_CPUUSER N/A enabled N/A N/A N/A
.\CTX_STREAMINGSVC N/A enabled N/A N/A N/A
KHA.ORG\backupexec backupexec enabled 07/11/2014 01:51 PM <never> 05/04/2018 10:00 AM
Inactive Service Accounts User Name Display Name Enabled Password Last Set Password Expires Last Login
KHA.ORG\BigCheese Administrator disabled 07/11/2017 11:11 AM <never> 08/30/2017 10:00 AM
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 21 of 133
3.7 - Security Groups This section contains a listing of all security groups from Active Directory with detailed information on group membership by user account.
Carter, Dora Cortez, Glenda Wright, Jana Loflin, Jannel Jackson, John Bond, Lisa Moran, Lisa Stewart, Luteya Nash, Mark Hatchett, Mekole Spencer, Melinda Linnell, Natalea Ehrhardt, Rasheda Allen, Regina Muwwakkil, Ruthell Reece, Samuel Roark, Sherrylle Hatfield, Sorondo Newman, Tamu DeFoe, Theresa Duke
Enabled: Alvin White, Anna Sport, Anwar Crockett, Arnita Wilson, Barbara Finch, Benice Meeks, Brandi
Fulson, Bree Spearman, Carrie Rush, Cherlyn Creek, Cherrie Escobar, consult, Courtney Crawford, Dana Clark, Deborah Thompson, Dennis Bohnert, Donisha Carter, Dora Cortez, Edna Ford, Elaine Stroud, Elizabeth Patrick, Employee Info Line, frontdesk, Gano Watson, geneb, Glenda Wright, Gregg Gibson, Jackie Randle, Jana Loflin, Jannel Jackson, Jerry Glavin, Jessica Hatcliff, Joanna Zugecic, John Bond, John Jefferson, Julio Marino, kckha, Kendra Tyler, Lisa Moran, Lisa Stewart, Luteya Nash, Maintenance Work Order VM, Maranda Neely, Marcos Oropeza, Maria Arriaga, Mark Hatchett, Mary
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 22 of 133
Group Name Members
Fisher, Mekole Spencer, Melinda Linnell, Milton Scott, Natalea Ehrhardt, Pam Batchelor, Patrick Quinto, Paula Draves, Rasheda Allen, Regina Muwwakkil, ressel, Robert Purduski, Ron Cobb, Ruthell Reece, Samuel Roark, sec8, services, Sharron Davis-Mays, Sherrylle Hatfield, Shirley Fiscus, Sorondo Newman, Susan Martin, Tamu DeFoe, test, test2, Theresa Duke, Therese Linman, Tina Hill, Tom Scott, Tom Wiesing, Tom Wilson, Tony Shomin, Tonya Lewis, Veronica Sanders, Victor Hernandez
backupexec, Barbara Finch, Barbara Finch 2, Benice Meeks, board, Board Room, Brandi Fulson, Bree
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 27 of 133
Group Name Members
127 Total: 119 Enabled, 8 Disabled
Spearman, Carrie Rush, Cherlyn Creek, Cherrie Escobar, consult, Courtney Crawford, Dana Clark, Deborah Thompson, Dennis Bohnert, Donisha Carter, Dora Cortez, Dora Cortez 2, Edna Ford, Elaine Stroud, Elaine Stroud 2, Elizabeth Patrick, Employee Info Line, finance, finance2, frontdesk, Gano Watson, Gary Alter, geneb, Glenda Wright, Gregg Gibson, habinc1, habinc2, habinc3, habinc4, IUSR_ADC2, IUSR_ADCFSMO, IUSR_NTPDC, IWAM_ADC2, IWAM_ADCFSMO, IWAM_NTPDC, Jackie Randle, Jana Loflin, Jannel Jackson, jci, Jerry Glavin, Jessica Hatcliff, Joanna Zugecic, John Bond, John Jefferson, Journal, Julio Marino, Kathleen Coode, kckha, Keith Levers, Kendra Tyler, ldapcm, Lisa Moran, Lisa Moran 2, Lisa Stewart, Luteya Nash, Maintenance Work Order VM, Maranda Neely, Marcos Oropeza, Maria Arriaga, Mark Hatchett, Mary Fisher, Mekole Spencer, Melinda Linnell, Melinda Linnell 2, Milton Scott, mmad, Natalea Ehrhardt, Niyigiraimbabazi Zacharia, Pam Batchelor, Patrick Quinto, Paula Draves, Rasheda Allen, Rebooter, Regina Muwwakkil, ressel, Robert Marin, Robert Purduski, Ron Cobb, Ruthell Reece, Samuel Roark, sec8, services, Shamella Skipper, Sharron Davis-Mays, Sherrylle Hatfield, Shirley Fiscus, Sorondo Newman, sqladmin, Susan Martin, swrllp, Tamu DeFoe, test, test2, Theresa Duke, Therese Linman, Tina Hill, Tom Scott, Tom Wiesing, Tom Wilson, Tony Shomin, Tonya Lewis, unitycxn, Veronica Sanders, Victor Hernandez, wcsinc Disabled: DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},
FederatedEmail.4c1f4d8b-8179-4148-93bf-00a95fa1e042, Finance PTO, Phil Weitze, Sherreda Hollinshed, SUPPORT_388945a0, SystemMailbox{1f05a927-a429-4dda-ad2c-0bdcc05c6541}, SystemMailbox{e0dc1c29-89c3-4034-b678-e6c29d823ed9}
backupexec, Barbara Finch, Barbara Finch 2, Benice Meeks, board, Board Room, Brandi Fulson, Bree Spearman, Carrie Rush, Cherlyn Creek, Cherrie Escobar, consult, Courtney Crawford, Dana Clark, Deborah Thompson, Dennis Bohnert, Donisha Carter, Dora Cortez, Dora Cortez 2, Edna Ford, Elaine Stroud, Elaine Stroud 2, Elizabeth Patrick, Employee Info Line, finance, finance2, frontdesk, Gano Watson, Gary Alter, geneb, Glenda Wright, Gregg Gibson, habinc1, habinc2, habinc3, habinc4, IUSR_ADC2, IUSR_ADCFSMO, IUSR_NTPDC, IWAM_ADC2, IWAM_ADCFSMO, IWAM_NTPDC, Jackie Randle, Jana Loflin, Jannel Jackson, jci, Jerry Glavin, Jessica Hatcliff, Joanna Zugecic, John Bond, John Jefferson, Journal, Julio Marino, Kathleen Coode, kckha, Keith Levers, Kendra Tyler, ldapcm, Lisa Moran, Lisa Moran 2, Lisa Stewart, Luteya Nash, Maintenance Work Order VM, Maranda Neely, Marcos Oropeza, Maria Arriaga, Mark Hatchett, Mary Fisher, Mekole Spencer, Melinda Linnell, Melinda Linnell 2, Milton Scott, mmad, Natalea Ehrhardt, Niyigiraimbabazi Zacharia, Pam Batchelor, Patrick Quinto, Paula Draves, Rasheda Allen, Rebooter, Regina Muwwakkil, ressel, Robert Marin,
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 33 of 133
Group Name Members
Robert Purduski, Ron Cobb, Ruthell Reece, Samuel Roark, sec8, services, Shamella Skipper, Sharron Davis-Mays, Sherrylle Hatfield, Shirley Fiscus, Sorondo Newman, sqladmin, Susan Martin, swrllp, Tamu DeFoe, test, test2, Theresa Duke, Therese Linman, Tina Hill, Tom Scott, Tom Wiesing, Tom Wilson, Tony Shomin, Tonya Lewis, unitycxn, Veronica Sanders, Victor Hernandez, wcsinc Disabled: DiscoverySearchMailbox {D919BA05-46A6-415f-80AD-7E09334BB852},
FederatedEmail.4c1f4d8b-8179-4148-93bf-00a95fa1e042, Finance PTO, Phil Weitze, Sherreda Hollinshed, SUPPORT_388945a0, SystemMailbox{1f05a927-a429-4dda-ad2c-0bdcc05c6541}, SystemMailbox{e0dc1c29-89c3-4034-b678-e6c29d823ed9}
3.8 - Computers in Domain This section contains a listing of all computers from Active Directory. Computers which have not logged in for over 30 days are marked as inactive computers and highlighted in red. Disabled computers are highlighted in gray.
Active Computers Computer Name IP Address(es) DNS Entry Enabled Operating System Last Login
ADC01 fe80::98cf:e16b:df30:b0ab%11,192.168.10.19
adc01.kha.org enabled Microsoft Windows Server 2008 R2 Standard
5/4/2018 11:29:34 AM
ADC02 192.168.10.20 adc02.kha.org enabled Microsoft Windows Server 2008 R2 Standard
5/4/2018 2:40:44 PM
ADC03 192.168.10.9 adc03.kha.org enabled Microsoft Windows Server 2008 R2 Standard
5/4/2018 2:41:20 PM
APPS1 192.168.10.18 apps1.kha.org enabled Microsoft Windows Server 2008 R2 Standard
5/4/2018 2:38:46 PM
BOARDROOM 192.168.10.69 boardroom.kha.org enabled Microsoft Windows XP Professional
5/3/2018 11:14:39 AM
ESX1 enabled unknown 5/2/2018 8:00:53 PM
EXCHANGE 192.168.10.17 exchange.kha.org enabled Microsoft Windows Server 2008 R2 Standard
5/4/2018 2:36:36 PM
FINANCE-AP 192.168.10.23 finance-ap.kha.org enabled Microsoft Windows 7 Professional
5/4/2018 2:38:42 PM
HAB1 192.168.10.13 hab1.kha.org enabled Microsoft Windows Server 2008 R2 Standard
5/4/2018 2:38:13 PM
HSGMGMT2-PC 192.168.10.43 hsgmgmt2-pc.kha.org enabled Microsoft Windows 7 Professional
5/4/2018 2:25:39 PM
KATHY-PC enabled Windows 7 Professional 5/4/2018 2:00:34 PM
KCKADMIN-BARBAR 192.168.10.61 kckadmin-barbar enabled Microsoft Windows 7 Professional
5/4/2018 2:05:59 PM
KCKADMIN-HP enabled Windows 7 Professional 5/2/2018 4:59:38 PM
KCKADMIN-LISA 192.168.10.58 kckadmin-lisa.kha.org enabled Microsoft Windows 7 Professional
5/4/2018 2:14:44 PM
KCKADMIN-MELIND enabled Windows 7 Professional 5/1/2018 4:08:51 PM
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 35 of 133
Computer Name IP Address(es) DNS Entry Enabled Operating System Last Login
KCK-FRONTDESK 192.168.10.42 kck-frontdesk.kha.org enabled Microsoft Windows 7 Professional
5/4/2018 2:25:44 PM
MAINTSUPPLY-PC 192.168.20.20 maintsupply-pc.kha.org enabled Microsoft Windows 7 Professional
5/4/2018 2:00:31 PM
TARS1-PC 192.168.10.37 tars1-pc.kha.org enabled Microsoft Windows 7 Professional
5/4/2018 2:25:42 PM
TARW1-PC enabled Windows 7 Professional 5/4/2018 12:52:59 PM
TARW2-PC 192.168.10.59 tarw2-pc.kha.org enabled Microsoft Windows 7 Professional
5/3/2018 2:03:05 AM
UTILITY1 192.168.10.14 utility1.kha.org enabled Microsoft Windows Server 2008 R2 Standard
5/4/2018 2:35:00 PM
VERONICAPC 192.168.10.38 veronicapc.kha.org enabled Microsoft Windows 7 Professional
5/4/2018 2:34:44 PM
XENAPP01 192.168.10.16 xenapp01.kha.org enabled Microsoft Windows Server 2008 R2 Standard
5/4/2018 10:16:21 AM
XENAPP02 192.168.10.15 xenapp02.kha.org enabled Microsoft Windows Server 2008 R2 Standard
5/4/2018 2:04:21 PM
Inactive Computers Computer Name IP Address(es) DNS Entry Enabled Operating System Last Login
BOARD-PC disabled Windows 7 Professional 2/10/2017 12:57:46 PM
CISCOAC enabled Windows Server 2008 R2 Standard
5/17/2012 8:28:45 AM
ELDSERVDIR enabled Windows 2000 Professional 9/24/2013 9:02:05 AM
FIN01 enabled Windows XP Professional 4/6/2015 10:47:29 AM
FINADMIN enabled Windows XP Professional 4/4/2018 11:41:40 AM
FINANCEAR1 enabled Windows XP Professional 11/5/2014 9:11:42 AM
GG-HP enabled Windows 7 Professional 3/12/2018 4:32:06 PM
GREGG enabled Windows 7 Professional 8/27/2016 5:29:58 PM
GREGG-DELL enabled Windows 7 Professional 8/26/2016 4:07:17 PM
KCKHA02-PC enabled Windows 7 Professional 11/21/2014 1:16:47 PM
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 36 of 133
Computer Name IP Address(es) DNS Entry Enabled Operating System Last Login
KCKHA05-PC enabled Windows 7 Professional 11/21/2014 9:49:57 AM
KCKHA456 enabled Windows XP Professional 7/11/2017 12:20:32 PM
KCKHA-JUNIPER1- disabled Windows 7 Professional 2/24/2017 3:22:44 PM
KCKHAM2 enabled Windows XP Professional 6/13/2017 5:03:31 AM
TAR1-PC enabled Windows 7 Professional 8/25/2015 2:53:44 PM
TAR2-PC enabled Windows 7 Professional 8/25/2015 2:53:46 PM
VERONICA disabled Windows 7 Professional 8/29/2013 8:43:44 AM
XENAPP03 enabled Windows Server 2008 R2 Standard
5/27/2014 6:01:07 PM
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 37 of 133
3.9 - Server Aging This section is in indicator of the age of the active servers based on the date their operating system was installed. The actual age of the server may vary if the operating system was re-installed for any reason. Older systems are highlighted in red and much older systems are bolded. Computer Operating System OS Install Date Age (months)
HAB1 Windows Server 2008 R2 Standard 5/5/2011 1:35:03 AM 84
ADC02 Microsoft Windows Server 2008 R2 Standard 5/23/2011 9:50:18 PM 84
XENAPP01 Microsoft Windows Server 2008 R2 Standard 5/25/2011 11:41:04 PM 84
XENAPP02 Microsoft Windows Server 2008 R2 Standard 5/26/2011 12:16:30 AM 84
APPS1 Windows Server 2008 R2 Standard 5/26/2011 6:30:49 AM 84
EXCHANGE Microsoft Windows Server 2008 R2 Standard 5/26/2011 10:42:48 AM 84
UTILITY1 Microsoft Windows Server 2008 R2 Standard 5/26/2011 12:26:07 PM 84
ADC01 Microsoft Windows Server 2008 R2 Standard 6/12/2011 3:56:43 PM 83
ADC03 Microsoft Windows Server 2008 R2 Standard 9/10/2015 7:06:38 PM 32
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 38 of 133
3.10 - Workstation Aging This section is in indicator of the age of the active workstations based on the date their operating system was installed. The actual age of the workstation may vary if the operating system was re-installed for any reason. Older systems are highlighted in red and much older systems are bolded. Computer Operating System OS Install Date Age (months)
BOARDROOM Microsoft Windows XP 1/19/2009 11:57:13 AM 112
VERONICAPC Windows 7 Professional 12/15/2010 11:16:19 AM 89
KCK-FRONTDESK Windows 7 Professional 3/7/2012 1:31:50 PM 74
MAINTSUPPLY-PC Windows 7 Professional 10/20/2014 9:59:01 AM 43
FINANCE-AP Windows 7 Professional 4/9/2015 10:49:00 AM 37
TARW2-PC Windows 7 Professional 8/27/2015 11:55:26 AM 33
TARS1-PC Windows 7 Professional 9/11/2015 4:02:03 PM 32
KCKADMIN-BARBAR Windows 7 Professional 4/4/2017 11:49:50 AM 13
KCKADMIN-LISA Windows 7 Professional 4/4/2017 12:50:54 PM 13
HSGMGMT2-PC Windows 7 Professional 6/23/2017 12:24:08 PM 11
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 39 of 133
3.11 - Domain DNS This section contains a listing of all IP addresses and hostnames from DNS, with conflicting entries highlighted in red. IP Address Hostname
172.30.1.210 wyandotte-smartview.kha.org
172.30.3.210 bethany-smartview.kha.org
172.30.5.210 westgate-smartview.kha.org
172.30.6.210 douglas-smartview.kha.org
192.168.10.9 adc03.kha.org
192.168.10.10 xenapp03.kha.org
192.168.10.11 ciscoac.kha.org
192.168.10.12 esx1.kha.org
192.168.10.13 hab1.kha.org
192.168.10.14 utility1.kha.org
192.168.10.15 xenapp02.kha.org
192.168.10.16 xenapp01.kha.org
192.168.10.17 exchange.kha.org
192.168.10.17 outlook.kha.org
192.168.10.18 apps1.kha.org
192.168.10.19 adc01.kha.org
192.168.10.19 kha.org
192.168.10.20 adc02.kha.org
192.168.10.20 kha.org
192.168.10.22 kathy-pc.kha.org
192.168.10.23 finance-ap.kha.org
192.168.10.23 rnp00267361f15c.kha.org
192.168.10.23 rnp00267371173a.kha.org
192.168.10.24 gregg.kha.org
192.168.10.28 kckadmin-hp.kha.org
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 40 of 133
IP Address Hostname
192.168.10.29 kckadmin-melinda.kha.org
192.168.10.31 financear1.kha.org
192.168.10.32 rnp002673ebbed7.kha.org
192.168.10.34 gregg.kha.org
192.168.10.34 gregg-pc.kha.org
192.168.10.36 kathleen.kha.org
192.168.10.37 tar1-pc.kha.org
192.168.10.37 tars1-pc.kha.org
192.168.10.38 veronicapc.kha.org
192.168.10.39 kckha456.kha.org
192.168.10.42 kck-frontdesk.kha.org
192.168.10.43 hsgmgmt2-pc.kha.org
192.168.10.45 eldservdir.kha.org
192.168.10.46 rnp00267357c52c.kha.org
192.168.10.47 tar2-pc.kha.org
192.168.10.55 kckadmin-hp.kha.org
192.168.10.57 tarw1-pc.kha.org
192.168.10.58 kckadmin-lisa.kha.org
192.168.10.59 tarw2-pc.kha.org
192.168.10.60 fin01.kha.org
192.168.10.60 finadmin.kha.org
192.168.10.60 npi10588d.kha.org
192.168.10.61 gregg-dell.kha.org
192.168.10.61 kckadmin-barbara.kha.org
192.168.10.61 kckha05-pc.kha.org
192.168.10.62 gg-hp.kha.org
192.168.10.63 rnp00267362f454.kha.org
192.168.10.64 kckham2.kha.org
192.168.10.69 boardroom.kha.org
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 41 of 133
IP Address Hostname
192.168.10.234 vnxe.kha.org
192.168.10.235 ads05-001-kckha.kha.org
192.168.10.237 esx1-ilo.kha.org
192.168.10.239 kckhalinux-ilo.kha.org
192.168.10.240 utility1-ilo.kha.org
192.168.10.241 exchange-ilo.kha.org
192.168.10.242 apps1-ilo.kha.org
192.168.10.243 xenapp02-ilo.kha.org
192.168.10.244 xenapp01-ilo.kha.org
192.168.10.245 adc02-ilo.kha.org
192.168.10.246 adc01-ilo.kha.org
192.168.10.247 kckhalinux.kha.org
192.168.20.20 maintsupply-pc.kha.org
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 42 of 133
4 - Non A/D Devices This section contains a listing of all devices which were not joined to a domain or workgroup. IP Address Computer Name Listening Port(s) Device Type
RICOH Aficio MP 301 3.22 / RICOH Network Printer C model / RICOH Network Scanner C model / RICOH Network Facsimile C model
192.168.10.161 HTTP (80/TCP) RICOH Aficio MP 301 3.22 / RICOH Network Printer C model / RICOH Network Scanner C model / RICOH Network Facsimile C model
192.168.10.165 RNP0026738A9CB5 Telnet (23/TCP), HTTP (80/TCP) RICOH Aficio MP 301 3.22 / RICOH Network Printer C model / RICOH Network Scanner C model / RICOH Network Facsimile C model
5 - Servers This section and corresponding sub-sections contain a comprehensive listing of servers by type, which are then categorized by domain or workgroup membership.
5.1 - MS SQL Servers
KHA.ORG MS SQL Server Name Instance Version # of Databases Active SQL Agent Jobs?
KHA.ORG IP Address(es) Server Name Errors (last 24 hours)
fe80::98cf:e16b:df30:b0ab%11, 192.168.10.19
adc01.kha.org
192.168.10.20 adc02.kha.org
5.6 - Hyper-V Servers No Hyper-V Servers were discovered.
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 50 of 133
6 - Printers This section contains a listing of all printers categorized by a combination of domain or workgroup membership and method of access. Alerts for SNMP-enabled printers are also displayed in red.
KHA.ORG (from Active Directory) IP Address Printer Name Accessed From Location Comment
IP Address Printer Name Hostname Description Alerts
model / RICOH Network Scanner C model / RICOH Network Facsimile C model
192.168.10.159 MP 2553 RNP0026738AD5C3 RICOH MP 2553 1.09 / RICOH Network Printer C model / RICOH Network Scanner C model / RICOH Network Facsimile C model
Energy Saver Mode {10033}
192.168.10.160 Aficio MP 301 RNP00267362F454.KHA.ORG RICOH Aficio MP 301 3.22 / RICOH Network Printer C model / RICOH Network Scanner C model / RICOH Network Facsimile C model
Replace PCU {30401}
192.168.10.161 Aficio MP 301 192.168.10.161 RICOH Aficio MP 301 3.22 / RICOH Network Printer C model / RICOH Network Scanner C model / RICOH Network Facsimile C model
Energy Saver Mode {10033}
192.168.10.165 Aficio MP 301 RNP0026738A9CB5 RICOH Aficio MP 301 3.22 / RICOH Network Printer C model / RICOH Network Scanner C model / RICOH Network Facsimile C model
Energy Saver Mode {10033}
192.168.10.166 MP 2553 RNP0026738AD6FA RICOH MP 2553 1.09 / RICOH Network Printer C model / RICOH Network Scanner C model / RICOH Network Facsimile C model
192.168.10.167 Aficio MP 5002 RNP0026738B1808 RICOH Aficio MP 5002 2.13 / RICOH Network Printer C model / RICOH Network Scanner C model / RICOH Network Facsimile C model
Replace Cleaning Web {30402} Replace Fusing Unit {30405} No Paper: Tray 3 {13400} Energy Saver Mode {10033}
192.168.10.168 MP 2553 RNP0026738AD5B6 RICOH MP 2553 1.09 / RICOH Network Printer C model / RICOH Network Scanner C model / RICOH Network Facsimile C model
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 56 of 133
IP Address Printer Name Hostname Description Alerts
192.168.10.169 MP 2553 RNP0026738AD6C4 RICOH MP 2553 1.09 / RICOH Network Printer C model / RICOH Network Scanner C model / RICOH Network Facsimile C model
192.168.10.170 FIN_4350 HP ETHERNET MULTI-ENVIRONMENT,ROM none,JETDIRECT,JD128,EEPROM V.33.21,CIDATE 02/04/2010
RICOH Aficio MP 4002 2.19 / RICOH Network Printer C model / RICOH Network Scanner C model / RICOH Network Facsimile C model
No Paper: Tray 2 {13300} No Paper: Tray 4 {13500}
192.168.10.172 NPI10588D.KHA.ORG HP ETHERNET MULTI-ENVIRONMENT,ROM none,JETDIRECT,JD128,EEPROM V.33.28,CIDATE 12/17/2014
192.168.10.174 NPIE1F8B9 HP ETHERNET MULTI-ENVIRONMENT,ROM none,JETDIRECT,JD128,EEPROM V.33.15,CIDATE 11/10/2006
192.168.10.175 MP 2553 RNP0026738AD709 RICOH MP 2553 1.09 / RICOH Network Printer C model / RICOH Network Scanner C model / RICOH Network Facsimile C model
192.168.10.178 MP 2553 RNP0026738AD780 RICOH MP 2553 1.09 / RICOH Network Printer C model / RICOH Network Scanner C model / RICOH Network Facsimile C model
KHA.ORG (from Shares)
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 57 of 133
Shared Printer User/Group Share Permissions
Full Control Change Read
\\APPS1\Admin 4300 (Admin 4300,LocalsplOnly)
KHA\bigcheese
Everyone
BUILTIN\Administrators
\\APPS1\Admin 4650 (Admin 4650,LocalsplOnly)
KHA\bigcheese
Everyone
BUILTIN\Administrators
\\APPS1\Comp1 (Comp1,LocalsplOnly)
KHA\bigcheese
Everyone
BUILTIN\Administrators
\\APPS1\Copier Admin (Copier Admin,LocalsplOnly)
KHA\bigcheese
Everyone
BUILTIN\Administrators
\\APPS1\Copier Elderly Service (Copier Elderly Service,LocalsplOnly)
8 - Major Applications This section contains a listing of major applications with corresponding version numbers and the number of computers the application was detected on. Applications that appear on more than three computers are highlighted in gray for easy recognition.
Domain kha.org Windows Applications Application Name Version # Computers Computers
Utility Manager Pro 4.1 Installation 4.1 2 XENAPP01, XENAPP02
Veeam Backup & Replication 8.0 1 APPS1
Veeam Backup Transport 8.0 1 APPS1
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 75 of 133
Application Name Version # Computers Computers
Veeam Backup vPowerNFS 8.0 1 APPS1
VIP Access SDK (1.0.1.4) 1.0 1 KCK-FRONTDESK
VirtualCloneDrive 3 APPS1, UTILITY1, XENAPP01
VMware Tools 8.6 1 ADC03
VMware vSphere Client 5.0 5.0 1 APPS1
WebEx 1 BOARDROOM
WIDCOMM Bluetooth Software 5.1 1 BOARDROOM
Windows Driver Package - Dell Inc. PBADRV System (09/11/2009 1.0.1.6)
09/11/2009 1.0 1 VERONICAPC
Windows Internet Explorer 8 20090308.140743
1 BOARDROOM
Windows Live Essentials 14.0 1 VERONICAPC
Windows Live Sign-in Assistant 5.000 1 VERONICAPC
Windows Live Sync 14.0 1 VERONICAPC
Windows Live Upload Tool 14.0 1 VERONICAPC
Windows Management Framework Core 1 BOARDROOM
Windows Media Format 11 runtime 1 BOARDROOM
Windows Media Player 11 1 BOARDROOM
Windows Server Update Services 3.0 SP2 3.2 1 UTILITY1
WinSCP 5.5.6 5.5 1 APPS1
WinZip 15.0 15.0 1 KCK-FRONTDESK
Xenapp Desktop 1.0 1 HSGMGMT2-PC
YourTemplateFinder Internet Explorer Homepage and New Tab 1 XENAPP02
Zebra Font Downloader 3 MAINTSUPPLY-PC, XENAPP01, XENAPP02
ZebraDesigner Pro 2 3 MAINTSUPPLY-PC, XENAPP01, XENAPP02
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 76 of 133
9 - Endpoint Security and Backup
This section contains a listing of detected anti-virus, anti-spyware, firewall, and backup information as detected through Security Center and/or
Installed Services for major vendors, which is then categorized by domain or workgroup membership. Values in the 'Name' column contain either the name of the product, None indicating the that machine returned information but no product was found, or <empty> indicating that information was not obtainable. Additionally, a status of indicates 'yes', indicates 'no', and <empty> indicates that a status was not available.
KHA.ORG
Computer Name Anti-virus Anti-spyware Firewall Backup
Name On Current Name On Current Name On Name Current
ADC01 None None Windows Firewall
Backup Exec
ADC02 Symantec Endpoint Protection
Symantec Endpoint Protection
Symantec Endpoint Protection
None
Windows Firewall
ADC03 None None Windows Firewall
None
APPS1 Symantec Endpoint Protection
Symantec Endpoint Protection
Symantec Endpoint Protection
Backup Exec
Windows Firewall
Veeam Backup
BOARDROOM Symantec AntiVirus
Symantec AntiVirus
None None
ESX1
EXCHANGE None None Windows Firewall
Backup Exec
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 77 of 133
Computer Name Anti-virus Anti-spyware Firewall Backup
Name On Current Name On Current Name On Name Current
FINANCE-AP Symantec Endpoint Protection
Symantec Endpoint Protection
Symantec Endpoint Protection
None
Windows Defender
Windows Defender
Windows Firewall
HAB1 Symantec Endpoint Protection
Symantec Endpoint Protection
Symantec Endpoint Protection
Backup Exec
Windows Firewall
HSGMGMT2-PC Symantec Endpoint Protection
Symantec Endpoint Protection
Symantec Endpoint Protection
None
Windows Defender
Windows Defender
Windows Firewall
KATHY-PC
KCKADMIN-BARBAR Symantec Endpoint Protection
Symantec Endpoint Protection
Symantec Endpoint Protection
None
Windows Defender
Windows Defender
Windows Firewall
KCKADMIN-HP
KCKADMIN-LISA Symantec Endpoint Protection
Symantec Endpoint Protection
Symantec Endpoint Protection
None
Windows Defender
Windows Defender
Windows Firewall
KCKADMIN-MELIND
KCK-FRONTDESK Symantec Endpoint Protection
Symantec Endpoint Protection
Symantec Endpoint Protection
None
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 78 of 133
Computer Name Anti-virus Anti-spyware Firewall Backup
Name On Current Name On Current Name On Name Current
Windows Defender
Windows Defender
Symantec Endpoint Protection
Windows Firewall
MAINTSUPPLY-PC Symantec Endpoint Protection
Symantec Endpoint Protection
Symantec Endpoint Protection
None
Windows Defender
Windows Defender
Symantec Endpoint Protection
Windows Firewall
TARS1-PC Symantec Endpoint Protection
Symantec Endpoint Protection
Symantec Endpoint Protection
None
Windows Defender
Windows Defender
Windows Firewall
TARW1-PC
TARW2-PC Symantec Endpoint Protection
Symantec Endpoint Protection
Symantec Endpoint Protection
None
Windows Defender
Windows Defender
Windows Firewall
UTILITY1 Symantec Endpoint Protection
Symantec Endpoint Protection
Symantec Endpoint Protection
Backup Exec
Windows Firewall
VERONICAPC Symantec AntiVirus
Symantec AntiVirus
Windows Firewall
None
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 79 of 133
Computer Name Anti-virus Anti-spyware Firewall Backup
Name On Current Name On Current Name On Name Current
Windows Defender
Windows Defender
XENAPP01 Symantec Endpoint Protection
Symantec Endpoint Protection
Symantec Endpoint Protection
None
Windows Defender
Windows Defender
Windows Firewall
XENAPP02 Symantec Endpoint Protection
Symantec Endpoint Protection
Symantec Endpoint Protection
None
Windows Defender
Windows Defender
Windows Firewall
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 80 of 133
10 - Remote Listening Ports This section contains a list of common ports/protocols assessed, and is categorized by domain or workgroup membership. Items with a red check indicate a potential risk.
11 - Internet Access This section lists the latency between the computer and both Google and Yahoo, as well as a trace route to Google for further diagnostics if needed. Internet Access
Latency Tests: Retrieval time for Google.com: 146 ms Retrieval time for Yahoo.com: 496 ms Internet trace route to Google.com:
Appendix I: Detailed Computer Analysis This section provides additional information on the servers, workstations, and devices in this report. Details are obtained via RPC, WMI or local scan.
KHA.ORG Computer Name
Operating System CPU RAM Analysis
ADC01 Microsoft Windows Server 2008 R2 Standard
Intel(R) Xeon(R) CPU E5606 @ 2.13GHz
12288 MB
Last 5 System Error Msgs: 5-4-2018 2:41:05 PM 1111 Driver Citrix Universal Printer required for printer Foxit Reader PDF Printer (from DESKTOP-UVJABD5) in session 42 is unknown. Contact the administrator to install the driver before you log in again. 5-4-2018 2:41:04 PM 1111 Driver HP Universal Printing PCL 6 required for printer HP LaserJet 600 M601 UPD PCL 6 (from DESKTOP-UVJABD5) in session 42 is unknown. Contact the administrator to install the driver before you log in again. 5-4-2018 2:41:03 PM 1111 Driver HP Universal Printing PCL 6 required for printer HP LaserJet 600 M601 UPD PCL 6 (Copy 1) (from DESKTOP-UVJABD5) in session 42 is unknown. Contact the administrator to install the driver before you log in again. 5-4-2018 2:41:03 PM 1111 Driver Citrix Universal Printer required for printer Microsoft Print to PDF (from DESKTOP-UVJABD5) in session 42 is unknown. Contact the administrator to install the driver before you log in again. 5-4-2018 2:41:02 PM 1111 Driver Citrix Universal Printer required for printer Microsoft XPS Document Writer (from DESKTOP-UVJABD5) in session 42 is unknown. Contact the administrator to install the driver before you log in again. Last 5 Application Error Msgs: 4-12-2018 3:29:02 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. 4-12-2018 3:28:47 AM 8193 Volume Shadow Copy Service error: Unexpected error calling routine RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...). hr = 0x80070005, Access is denied. . Operation: Initializing Writer Context: Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {ba1b8bc6-f678-47e4-a15b-d6390a1b8a6e} 4-12-2018 3:23:38 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 85 of 133
Computer Name
Operating System CPU RAM Analysis
corrected. 4-12-2018 3:23:29 AM 8193 Volume Shadow Copy Service error: Unexpected error calling routine RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...). hr = 0x80070005, Access is denied. . Operation: Initializing Writer Context: Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {30b4dcae-4431-4f7c-9108-bca7d7d1b9e7} Remote Listening Ports: DNS (53/TCP) RDP (3389/TCP) Disk Capacity: C: 136.69 GB, 91.42 GB free, 33.12% used Service Tag: MXQ1370FGP CPU Count: 2 CPU Core Count: 8 Windows Key: HMG6P-C7VGP-47GJ9-TWBD4-2YYCD Make and Model: HP/ProLiant DL360 G7 Memory Banks: <slot available> PROC 2 DIMM 3A : DIMM-Synchronous-2048 Mb-1333 MHz PROC 2 DIMM 6B : DIMM-Synchronous-2048 Mb-1333 MHz PROC 2 DIMM 9C : DIMM-Synchronous-2048 Mb-1333 MHz PROC 1 DIMM 3A : DIMM-Synchronous-2048 Mb-1333 MHz <slot available> <slot available> <slot available> PROC 1 DIMM 6B : DIMM-Synchronous-2048 Mb-1333 MHz <slot available> <slot available> <slot available> PROC 1 DIMM 9C : DIMM-Synchronous-2048 Mb-1333 MHz CPUs: Intel(R) Xeon(R) CPU E5606 @ 2.13GHz : CPU0-4 Intel(R) Xeon(R) CPU E5606 @ 2.13GHz : CPU1-4 System Slots: System Slot0 : PCI-E Slot 1-Available-OK System Slot1 : PCI-E Slot 2-Available-OK
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 86 of 133
Computer Name
Operating System CPU RAM Analysis
NICs: : -RasSstp-[00000000] WAN Miniport (SSTP) : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP) : -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE) : -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) 3C:D9:2B:EB:7A:38 : 192.168.10.19;fe80::98cf:e16b:df30:b0ab-l2nd-[00000007] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000008] Microsoft ISATAP Adapter : -NdisWan-[00000009] WAN Miniport (IP) : -l2nd-[00000010] HP NC382i DP Multifunction Gigabit Server Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000011] RAS Async Adapter : -l2nd-[00000012] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000013] Microsoft Teredo Tunneling Adapter : -l2nd-[00000014] HP NC382i DP Multifunction Gigabit Server Adapter DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows Server 2008 R2 Standard OS Architecture: 64-bit OS Virtual Memory: 24560 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 6/12/2011 3:56:43 PM
ADC02 Microsoft Windows Server 2008 R2 Standard
Intel(R) Xeon(R) CPU E5506 @ 2.13GHz
12288 MB
Last 5 System Error Msgs: 5-4-2018 12:26:43 PM 5722 The session setup from the computer KATHY-PC failed to authenticate. The name(s) of the account(s) referenced in the security database is KATHY-PC$. The following error occurred: Access is denied. 5-4-2018 8:26:42 AM 5722 The session setup from the computer KATHY-PC failed to authenticate. The name(s) of the account(s) referenced in the security database is KATHY-
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 87 of 133
Computer Name
Operating System CPU RAM Analysis
PC$. The following error occurred: Access is denied. 5-3-2018 4:25:40 PM 5722 The session setup from the computer KATHY-PC failed to authenticate. The name(s) of the account(s) referenced in the security database is KATHY-PC$. The following error occurred: Access is denied. 5-3-2018 12:25:40 PM 5722 The session setup from the computer KATHY-PC failed to authenticate. The name(s) of the account(s) referenced in the security database is KATHY-PC$. The following error occurred: Access is denied. 5-3-2018 8:20:52 AM 5722 The session setup from the computer KATHY-PC failed to authenticate. The name(s) of the account(s) referenced in the security database is KATHY-PC$. The following error occurred: Access is denied. Last 5 Application Error Msgs: 4-11-2018 3:13:16 AM 400 Network Intrusion Prevention is not protecting machine because its driver was unloaded 4-11-2018 3:10:34 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. 4-11-2018 3:10:25 AM 8193 Volume Shadow Copy Service error: Unexpected error calling routine RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...). hr = 0x80070005, Access is denied. . Operation: Initializing Writer Context: Writer Class Id: {5382579c-98df-47a7-ac6c-98a6d7106e09} Writer Name: TermServLicensing Writer Instance ID: {c63be13a-8f76-4497-bfa2-80765a4065e7} 4-11-2018 3:10:16 AM 8193 Volume Shadow Copy Service error: Unexpected error calling routine RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...). hr = 0x80070005, Access is denied. . Operation: Initializing Writer Context: Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {17387a12-f1e8-42ac-a02e-012dca8cc669} Remote Listening Ports: DNS (53/TCP) RDP (3389/TCP) Disk Capacity: C: 136.69 GB, 88.72 GB free, 35.09% used Service Tag: USE135N33Q CPU Count: 2 CPU Core Count: 8 Windows Key: HMG6P-C7VGP-47GJ9-TWBD4-2YYCD
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 88 of 133
Computer Name
Operating System CPU RAM Analysis
Make and Model: HP/ProLiant DL360 G7 Memory Banks: <slot available> PROC 2 DIMM 3A : DIMM-Synchronous-2048 Mb-1333 MHz PROC 2 DIMM 6B : DIMM-Synchronous-2048 Mb-1333 MHz PROC 2 DIMM 9C : DIMM-Synchronous-2048 Mb-1333 MHz PROC 1 DIMM 3A : DIMM-Synchronous-2048 Mb-1333 MHz <slot available> <slot available> <slot available> PROC 1 DIMM 6B : DIMM-Synchronous-2048 Mb-1333 MHz <slot available> <slot available> <slot available> PROC 1 DIMM 9C : DIMM-Synchronous-2048 Mb-1333 MHz CPUs: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz : CPU0-4 Intel(R) Xeon(R) CPU E5506 @ 2.13GHz : CPU1-4 System Slots: System Slot0 : PCI-E Slot 1-Available-OK System Slot1 : PCI-E Slot 2-Available-OK NICs: : -RasSstp-[00000000] WAN Miniport (SSTP) : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP) : -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE) : -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) 10:1F:74:30:83:D0 : 192.168.10.20;fe80::6801:409c:72a1:d9a4-l2nd-[00000007] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000008] Microsoft ISATAP Adapter : -NdisWan-[00000009] WAN Miniport (IP) : -l2nd-[00000010] HP NC382i DP Multifunction Gigabit Server Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000011] RAS Async Adapter : -tunnel-[00000012] Microsoft ISATAP Adapter : -l2nd-[00000013] HP NC382i DP Multifunction Gigabit Server Adapter : -l2nd-[00000014] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000015] Microsoft ISATAP Adapter : -tunnel-[00000017] Microsoft ISATAP Adapter
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 89 of 133
Computer Name
Operating System CPU RAM Analysis
: -tunnel-[00000018] Microsoft Teredo Tunneling Adapter DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows Server 2008 R2 Standard OS Architecture: 64-bit OS Virtual Memory: 24560 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 5/23/2011 9:50:18 PM Active Anti-virus: Symantec Endpoint Protection Active Anti-spyware: Symantec Endpoint Protection Active Firewall: Symantec Endpoint Protection
ADC03 Microsoft Windows Server 2008 R2 Standard
Intel(R) Xeon(R) CPU E5606 @ 2.13GHz
4096 MB
Last 5 System Error Msgs: 5-4-2018 9:57:28 AM 1111 Driver RICOH MP 2553 PCL 5e required for printer RICOH MP 2553 (St. Margaret's) is unknown. Contact the administrator to install the driver before you log in again. 5-4-2018 9:57:26 AM 1111 Driver CutePDF Writer v3.2 required for printer CutePDF Writer is unknown. Contact the administrator to install the driver before you log in again. 5-4-2018 9:57:26 AM 1111 Driver RICOH Aficio MP C305 PCL 6 required for printer RICOH Aficio MP C305 PCL 6 is unknown. Contact the administrator to install the driver before you log in again. 5-4-2018 9:57:25 AM 1111 Driver Citrix Universal Printer required for printer NPI37ABA5 (HP LaserJet 600 M601) (from DOUGLAS) in session 43 is unknown. Contact the administrator to install the driver before you log in again. 5-4-2018 9:57:21 AM 1111 Driver Citrix Universal Printer required for printer Microsoft XPS Document Writer (from GARYA6996) in session 42 is unknown. Contact the administrator to install the driver before you log in again. Last 5 Application Error Msgs: 4-11-2018 3:07:28 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2"
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 90 of 133
Computer Name
Operating System CPU RAM Analysis
because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Remote Listening Ports: DNS (53/TCP) RDP (3389/TCP) Disk Capacity: C: 59.9 GB, 32.49 GB free, 45.76% used Service Tag: None CPU Count: 1 CPU Core Count: 1 Windows Key: HMG6P-C7VGP-47GJ9-TWBD4-2YYCD Make and Model: VMware, Inc./VMware Virtual Platform Memory Banks: RAM slot #0 : DIMM-EDO-4096 Mb-unknown MHz Additional 32 virtual memory slot CPUs: Intel(R) Xeon(R) CPU E5606 @ 2.13GHz : CPU0-1 System Slots: System Slot0 : ISA Slot J8-Unknown-Unknown System Slot1 : ISA Slot J9-Unknown-Unknown System Slot2 : ISA Slot J10-Unknown-Unknown System Slot3 : PCI Slot J11-In Use-OK System Slot4 : PCI Slot J12-Available-OK System Slot5 : PCI Slot J13-In Use-OK System Slot6 : PCI Slot J14-Available-OK NICs: : -RasSstp-[00000000] WAN Miniport (SSTP) : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP) : -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE) : -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) 00:0C:29:1E:F3:A5 : 192.168.10.9-vmxnet3ndis6-[00000007] vmxnet3 Ethernet Adapter : -tunnel-[00000008] Microsoft ISATAP Adapter : -NdisWan-[00000009] WAN Miniport (IP)
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 91 of 133
Computer Name
Operating System CPU RAM Analysis
: -tunnel-[00000010] Microsoft Teredo Tunneling Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000011] RAS Async Adapter DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows Server 2008 R2 Standard OS Architecture: 64-bit OS Virtual Memory: 8192 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 9/10/2015 7:06:38 PM Active Anti-virus: N/A Active Anti-spyware: N/A Active Firewall: Windows Firewall
APPS1 Windows Server 2008 R2 Standard
Intel(R) Xeon(R) CPU E5506 @ 2.13GHz
12288 MB
Last 5 System Error Msgs: 5-4-2018 9:56:11 AM 1111 Driver Citrix Universal Printer required for printer NPI37ABA5 (HP LaserJet 600 M601) (from DOUGLAS) in session 43 is unknown. Contact the administrator to install the driver before you log in again. 5-4-2018 9:56:08 AM 1111 Driver Citrix Universal Printer required for printer Microsoft XPS Document Writer (from GARYA6996) in session 42 is unknown. Contact the administrator to install the driver before you log in again. 5-4-2018 9:56:07 AM 1111 Driver Citrix Universal Printer required for printer Send To OneNote 2013 (from GARYA6996) in session 42 is unknown. Contact the administrator to install the driver before you log in again. 5-4-2018 9:56:06 AM 1111 Driver Citrix Universal Printer required for printer TOSHIBA e-STUDIO407CS-07790799 (from GARYA6996) in session 42 is unknown. Contact the administrator to install the driver before you log in again. 5-4-2018 9:56:05 AM 1111 Driver Citrix Universal Printer required for printer TOSHIBA e-STUDIO407CS-07790816 (from GARYA6996) in session 42 is unknown. Contact the administrator to install the driver before you log in again. Last 5 Application Error Msgs: 5-4-2018 9:55:52 AM 10005 Product: 64 Bit HP BiDi Channel Components Installer -- The
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 92 of 133
Computer Name
Operating System CPU RAM Analysis
installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2753. The arguments are: ipm12.8444768D_9A2B_44BE_BD52_02FB1B25C55E, , 4-19-2018 11:40:58 PM 3221229477 The Windows logon process has unexpectedly terminated. 4-19-2018 11:24:35 PM 3221229477 The Windows logon process has unexpectedly terminated. 4-19-2018 10:59:45 PM 3221229477 The Windows logon process has unexpectedly terminated. 4-19-2018 10:47:49 PM 3221229477 The Windows logon process has unexpectedly terminated. Scheduled Tasks: Adobe Flash Player Updater GoogleUpdateTaskMachineCore GoogleUpdateTaskMachineUA Reboot SolarWinds SCP Server Tray App Startup Task KHA_bigcheese Remote Listening Ports: SSH (22/TCP) HTTP (80/TCP) RDP (3389/TCP) Disk Capacity: C: 80 GB, 24.13 GB free, 69.84% used E: 740.21 GB, 356.4 GB free, 51.85% used Z: 6143.87 GB, 2360.76 GB free, 61.58% used Service Tag: USE135N294 CPU Count: 2 CPU Core Count: 8 Make and Model: HP/ProLiant DL380 G7 Memory Banks: <slot available> PROC 2 DIMM 3A : DIMM-Synchronous-2048 Mb-1333 MHz PROC 2 DIMM 6B : DIMM-Synchronous-2048 Mb-1333 MHz PROC 2 DIMM 9C : DIMM-Synchronous-2048 Mb-1333 MHz PROC 1 DIMM 3A : DIMM-Synchronous-2048 Mb-1333 MHz <slot available> <slot available>
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 93 of 133
Computer Name
Operating System CPU RAM Analysis
<slot available> PROC 1 DIMM 6B : DIMM-Synchronous-2048 Mb-1333 MHz <slot available> <slot available> <slot available> PROC 1 DIMM 9C : DIMM-Synchronous-2048 Mb-1333 MHz CPUs: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz : CPU0-4 Intel(R) Xeon(R) CPU E5506 @ 2.13GHz : CPU1-4 System Slots: System Slot0 : PCI-E Slot 1-Available-OK System Slot1 : PCI-E Slot 2-In Use-OK System Slot2 : PCI-E Slot 3-Available-OK NICs: : -RasSstp-[00000000] WAN Miniport (SSTP) : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP) : -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE) : -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) 9C:8E:99:0D:C0:82 : 172.16.1.10-l2nd-[00000007] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000008] Microsoft ISATAP Adapter : -NdisWan-[00000009] WAN Miniport (IP) : -l2nd-[00000010] HP NC382i DP Multifunction Gigabit Server Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000011] RAS Async Adapter : -tunnel-[00000012] Microsoft ISATAP Adapter 9C:8E:99:0D:C0:7E : 192.168.10.18;fe80::40d8:fac1:81c9:2f9f-l2nd-[00000013] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000014] Microsoft ISATAP Adapter 9C:8E:99:0D:C0:80 : 172.16.2.10;fe80::c94b:97c6:fc26:6572-l2nd-[00000015] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000016] Microsoft ISATAP Adapter : -tunnel-[00000017] Microsoft Teredo Tunneling Adapter DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601)
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 94 of 133
Computer Name
Operating System CPU RAM Analysis
OS Caption: Microsoft Windows Server 2008 R2 Standard OS Architecture: 64-bit OS Virtual Memory: 24560 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 5/26/2011 6:30:49 AM Active Anti-virus: Symantec Endpoint Protection Active Anti-spyware: Symantec Endpoint Protection Active Firewall: Symantec Endpoint Protection
BOARDROOM Microsoft Windows XP
Intel(R) Core(TM)2 Duo CPU E8500 @ 3.16GHz
4096 MB
Last 5 Application Error Msgs: 5-3-2018 4:25:50 PM 3221225487 Automatic certificate enrollment for local system failed to contact the active directory (0x8007003a). The specified server cannot perform the requested operation. Enrollment will not be performed. 5-3-2018 4:25:36 PM 3221226526 Windows cannot obtain the domain controller name for your computer network. (A socket operation was attempted to an unreachable host. ). Group Policy processing aborted. 5-3-2018 4:25:36 PM 3221226526 Windows cannot obtain the domain controller name for your computer network. (A socket operation was attempted to an unreachable host. ). Group Policy processing aborted. 5-3-2018 8:25:44 AM 3221226557 The Group Policy client-side extension Folder Redirection failed to execute. Please look for any errors reported earlier by that extension. 5-3-2018 8:25:44 AM 3221225579 Failed to perform redirection of folder My Documents. The folder is configured to be redirected from <\\apps\Home\board\My Documents> to <\\apps1\Home\board\My Documents>. The following error occurred: The directory name is invalid. Disk Capacity: C: 74.44 GB, 44.06 GB free, 40.81% used Service Tag: 6WFLWH1 CPU Count: 1 CPU Core Count: 2 Windows Key: XJM6Q-BQ8HW-T6DFB-Y934T-YD4YT
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 95 of 133
Computer Name
Operating System CPU RAM Analysis
Make and Model: Dell Inc./OptiPlex 760 Memory Banks: DIMM_1 : DIMM-Synchronous-2048 Mb-800 MHz DIMM_2 : DIMM-Synchronous-2048 Mb-800 MHz <slot available> CPUs: Intel(R) Core(TM)2 Duo CPU E8500 @ 3.16GHz : CPU0-2 NICs: : -AsyncMac-[00000001] RAS Async Adapter : -Rasl2tp-[00000002] WAN Miniport (L2TP) DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 5.1.2600 Service Pack 3 (Build 2600) OS Caption: Microsoft Windows XP Professional OS Virtual Memory: 2048 MB OS System Directory: C:\WINDOWS\system32 OS Windows Directory: C:\WINDOWS OS Install Date: 1/19/2009 11:57:13 AM Active Anti-virus: Symantec AntiVirus Active Anti-spyware: Symantec AntiVirus Active Firewall: N/A
ESX1 unknown
EXCHANGE Microsoft Windows Server 2008 R2 Standard
Intel(R) Xeon(R) CPU E5506 @ 2.13GHz
12288 MB
Last 5 System Error Msgs: 5-4-2018 9:20:48 AM 36888 The following fatal alert was generated: 40. The internal error state is 1205. 5-4-2018 9:20:48 AM 36874 An TLS 1.0 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The SSL connection request has failed. 5-4-2018 2:43:55 AM 36888 The following fatal alert was generated: 10. The internal error state is 1203. 5-4-2018 2:43:54 AM 36888 The following fatal alert was generated: 10. The internal error state
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 96 of 133
Computer Name
Operating System CPU RAM Analysis
is 1203. 5-3-2018 11:19:24 AM 36888 The following fatal alert was generated: 40. The internal error state is 1205. Last 5 Application Error Msgs: 5-4-2018 2:39:46 PM 3221499630 Microsoft Exchange could not find a certificate that contains the domain name EXCHANGE.kha.org in the personal store on the local computer. Therefore, it is unable to support the STARTTLS SMTP verb for the connector Relay with a FQDN parameter of EXCHANGE.kha.org. If the connector's FQDN is not specified, the computer's FQDN is used. Verify the connector configuration and the installed certificates to make sure that there is a certificate with a domain name for that FQDN. If this certificate exists, run Enable-ExchangeCertificate -Services SMTP to make sure that the Microsoft Exchange Transport service has access to the certificate key. 5-4-2018 2:38:55 PM 3221499630 Microsoft Exchange could not find a certificate that contains the domain name EXCHANGE.kha.org in the personal store on the local computer. Therefore, it is unable to support the STARTTLS SMTP verb for the connector Default EXCHANGE with a FQDN parameter of EXCHANGE.kha.org. If the connector's FQDN is not specified, the computer's FQDN is used. Verify the connector configuration and the installed certificates to make sure that there is a certificate with a domain name for that FQDN. If this certificate exists, run Enable-ExchangeCertificate -Services SMTP to make sure that the Microsoft Exchange Transport service has access to the certificate key. 5-4-2018 2:38:55 PM 3221499631 An internal transport certificate expired. Thumbprint:6533E9AF72DD17D9B3C770C6804C5FC5C46B6FB9 5-4-2018 2:29:42 PM 3221499630 Microsoft Exchange could not find a certificate that contains the domain name mail.kckha.org in the personal store on the local computer. Therefore, it is unable to support the STARTTLS SMTP verb for the connector 2010 to MailMarshall with a FQDN parameter of mail.kckha.org. If the connector's FQDN is not specified, the computer's FQDN is used. Verify the connector configuration and the installed certificates to make sure that there is a certificate with a domain name for that FQDN. If this certificate exists, run Enable-ExchangeCertificate -Services SMTP to make sure that the Microsoft Exchange Transport service has access to the certificate key. 5-4-2018 2:15:33 PM 3221232520 Content Filter is enabled and the last definition update was over 12 hours ago. Scheduled Tasks: Database One Copy Alert FSS-MICROSOFT,COMMAND Remote Listening Ports: SMTP (25/TCP) HTTP (80/TCP) HTTPS (443/TCP) RDP (3389/TCP) Disk Capacity:
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 97 of 133
Computer Name
Operating System CPU RAM Analysis
C: 136.69 GB, 87.74 GB free, 35.81% used J: 99.87 GB, 63.51 GB free, 36.41% used L: 48.83 GB, 48.44 GB free, 0.8% used M: 224.57 GB, 132.51 GB free, 40.99% used Service Tag: USE135N296 CPU Count: 2 CPU Core Count: 8 Windows Key: HMG6P-C7VGP-47GJ9-TWBD4-2YYCD Make and Model: HP/ProLiant DL380 G7 Memory Banks: <slot available> PROC 2 DIMM 3A : DIMM-Synchronous-2048 Mb-1333 MHz PROC 2 DIMM 6B : DIMM-Synchronous-2048 Mb-1333 MHz PROC 2 DIMM 9C : DIMM-Synchronous-2048 Mb-1333 MHz PROC 1 DIMM 3A : DIMM-Synchronous-2048 Mb-1333 MHz <slot available> <slot available> <slot available> PROC 1 DIMM 6B : DIMM-Synchronous-2048 Mb-1333 MHz <slot available> <slot available> <slot available> PROC 1 DIMM 9C : DIMM-Synchronous-2048 Mb-1333 MHz CPUs: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz : CPU0-4 Intel(R) Xeon(R) CPU E5506 @ 2.13GHz : CPU1-4 System Slots: System Slot0 : PCI-E Slot 1-Available-OK System Slot1 : PCI-E Slot 2-Available-OK System Slot2 : PCI-E Slot 3-Available-OK NICs: : -RasSstp-[00000000] WAN Miniport (SSTP) : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP) : -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE)
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 98 of 133
Computer Name
Operating System CPU RAM Analysis
: -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) 9C:8E:99:0D:CF:DC : 172.16.1.11-l2nd-[00000007] HP NC382i DP Multifunction Gigabit Server Adapter : -l2nd-[00000008] HP NC382i DP Multifunction Gigabit Server Adapter : -NdisWan-[00000009] WAN Miniport (IP) : -tunnel-[00000010] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000011] RAS Async Adapter : -tunnel-[00000012] Microsoft ISATAP Adapter 9C:8E:99:0D:CF:D8 : 192.168.10.17-l2nd-[00000013] HP NC382i DP Multifunction Gigabit Server Adapter 9C:8E:99:0D:CF:DA : 172.16.2.11-l2nd-[00000014] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000015] Microsoft ISATAP Adapter : -tunnel-[00000016] Microsoft ISATAP Adapter : -tunnel-[00000017] Microsoft Teredo Tunneling Adapter DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows Server 2008 R2 Standard OS Architecture: 64-bit OS Virtual Memory: 24560 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 5/26/2011 10:42:48 AM
FINANCE-AP Windows 7 Professional
Intel(R) Core(TM) i3-4150 CPU @ 3.50GHz
8192 MB
Last 5 System Error Msgs: 5-4-2018 2:25:33 PM 36887 The following fatal alert was received: 20. 5-4-2018 8:22:05 AM 3221232475 The McAfee AP Service service depends the following service: mfevtp. This service might not be installed. 5-2-2018 4:37:17 PM 3221235482 The server {D085A4AB-CAB1-4729-9DF8-FCEEDDBD19E4} did not register with DCOM within the required timeout. 5-1-2018 4:36:38 PM 3221235482 The server {D085A4AB-CAB1-4729-9DF8-
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 99 of 133
Computer Name
Operating System CPU RAM Analysis
FCEEDDBD19E4} did not register with DCOM within the required timeout. 4-30-2018 8:14:00 AM 3221232475 The McAfee AP Service service depends the following service: mfevtp. This service might not be installed. Last 5 Application Error Msgs: 5-4-2018 8:22:33 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. 5-3-2018 11:21:26 AM 3221356547 The following error was encountered: Violation of PRIMARY KEY constraint 'PK_BankAccount'. Cannot insert duplicate key in object 'dbo.SBankAccountDetail'. The duplicate key value is (0e50e416-bf8a-4739-818b-094d37b5a7eb). The statement has been terminated. <<-1>a><<****SQL****>> 5-2-2018 3:26:57 PM 3221356547 The following error was encountered: Violation of PRIMARY KEY constraint 'PK_BankAccount'. Cannot insert duplicate key in object 'dbo.SBankAccountDetail'. The duplicate key value is (fc637961-5226-4b20-8b83-b9424f137040). The statement has been terminated. <<-1>a><<****SQL****>> 5-2-2018 3:26:57 PM 3221356547 The following error was encountered: Violation of PRIMARY KEY constraint 'PK_BankAccount'. Cannot insert duplicate key in object 'dbo.SBankAccountDetail'. The duplicate key value is (7fe5bd54-9760-4a22-a34e-975124fd39d8). The statement has been terminated. <<-1>a><<****SQL****>> 5-2-2018 3:26:57 PM 3221356547 The following error was encountered: Violation of PRIMARY KEY constraint 'PK_BankAccount'. Cannot insert duplicate key in object 'dbo.SBankAccountDetail'. The duplicate key value is (0e50e416-bf8a-4739-818b-094d37b5a7eb). The statement has been terminated. <<-1>a><<****SQL****>> Scheduled Tasks: Adobe Flash Player Updater G2MUpdateTask-S-1-5-21-85988526-1757768791-1852903728-3271 G2MUploadTask-S-1-5-21-85988526-1757768791-1852903728-3271 PCDEventLauncherTask PCDoctorBackgroundMonitorTask SystemToolsDailyTest Disk Capacity: C: 907.25 GB, 836.47 GB free, 7.8% used Service Tag: H24SW12 CPU Count: 1 CPU Core Count: 2 Make and Model:
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 100 of 133
Computer Name
Operating System CPU RAM Analysis
Dell Inc./Inspiron 3847 Memory Banks: DIMM1 : DIMM-Synchronous-4096 Mb-1600 MHz DIMM2 : DIMM-Synchronous-4096 Mb-1600 MHz <slot available> CPUs: Intel(R) Core(TM) i3-4150 CPU @ 3.50GHz : CPU0-2 System Slots: System Slot0 : PCIEX16-In Use-OK System Slot1 : PCIEX1-In Use-OK System Slot2 : PCIEX1-In Use-OK System Slot3 : PCIEX1-In Use-OK NICs: : -RasSstp-[00000000] WAN Miniport (SSTP) : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP) : -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE) : -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) F8:BC:12:90:15:F0 : 192.168.10.23;fe80::d576:9053:27fa:c59d-RTL8167-[00000007] Realtek PCIe GBE Family Controller : -NdisWan-[00000008] WAN Miniport (IP) : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter 90:48:9A:89:0E:B3 : -athr-[00000011] Dell Wireless 1705 802.11b/g/n (2.4GHZ) : -tunnel-[00000012] Microsoft 6to4 Adapter : -tunnel-[00000014] Microsoft ISATAP Adapter : -BthPan-[00000015] Bluetooth Device (Personal Area Network) : -tunnel-[00000016] Microsoft ISATAP Adapter 90:48:9A:89:0E:B4 : -BthPan-[00000017] Bluetooth Device (Personal Area Network) : -tunnel-[00000019] Microsoft Teredo Tunneling Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Professional OS Architecture:
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 101 of 133
Computer Name
Operating System CPU RAM Analysis
64-bit OS Virtual Memory: 16224 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 4/9/2015 10:49:00 AM Active Anti-virus: Symantec Endpoint Protection, Windows Defender Active Anti-spyware: Symantec Endpoint Protection Active Firewall: Symantec Endpoint Protection
HAB1 Windows Server 2008 R2 Standard
Intel(R) Xeon(R) CPU E5606 @ 2.13GHz
12288 MB
Last 5 System Error Msgs: 4-10-2018 4:39:50 PM 36887 The following fatal alert was received: 40. 4-10-2018 4:39:50 PM 36887 The following fatal alert was received: 40. 4-10-2018 4:39:27 PM 36887 The following fatal alert was received: 40. 4-10-2018 4:39:27 PM 36887 The following fatal alert was received: 40. Scheduled Tasks: HMS PAL HMS Upload HMSOWL HMSOWL xml HMSPAL HMSPAL xml Restart Unify SuperX1 Remote Listening Ports: RDP (3389/TCP) Disk Capacity: C: 136.69 GB, 99.24 GB free, 27.4% used D: 546.8 GB, 518.78 GB free, 5.12% used Service Tag: USE204T10C CPU Count: 2 CPU Core Count: 8 Make and Model: HP/ProLiant DL380 G7 Memory Banks: PROC 1 DIMM 2D : DIMM-Synchronous-1024 Mb-1333 MHz
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 102 of 133
Computer Name
Operating System CPU RAM Analysis
<slot available> PROC 2 DIMM 2D : DIMM-Synchronous-1024 Mb-1333 MHz PROC 2 DIMM 3A : DIMM-Synchronous-1024 Mb-1333 MHz PROC 2 DIMM 5E : DIMM-Synchronous-1024 Mb-1333 MHz PROC 2 DIMM 6B : DIMM-Synchronous-1024 Mb-1333 MHz PROC 2 DIMM 8F : DIMM-Synchronous-1024 Mb-1333 MHz PROC 2 DIMM 9C : DIMM-Synchronous-1024 Mb-1333 MHz PROC 1 DIMM 3A : DIMM-Synchronous-1024 Mb-1333 MHz <slot available> <slot available> PROC 1 DIMM 5E : DIMM-Synchronous-1024 Mb-1333 MHz <slot available> PROC 1 DIMM 6B : DIMM-Synchronous-1024 Mb-1333 MHz PROC 1 DIMM 8F : DIMM-Synchronous-1024 Mb-1333 MHz PROC 1 DIMM 9C : DIMM-Synchronous-1024 Mb-1333 MHz CPUs: Intel(R) Xeon(R) CPU E5606 @ 2.13GHz : CPU0-4 Intel(R) Xeon(R) CPU E5606 @ 2.13GHz : CPU1-4 System Slots: System Slot0 : PCI-E Slot 1-Available-OK System Slot1 : PCI-E Slot 2-Available-OK System Slot2 : PCI-E Slot 3-Available-OK NICs: : -RasSstp-[00000000] WAN Miniport (SSTP) : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP) : -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE) : -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) 44:1E:A1:06:52:B4 : -l2nd-[00000007] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000008] Microsoft ISATAP Adapter : -NdisWan-[00000009] WAN Miniport (IP) 44:1E:A1:06:52:AE : 192.168.10.13;fe80::5105:ba87:b515:2dbe-l2nd-[00000010] HP NC382i DP Multifunction Gigabit Server Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000011] RAS Async Adapter : -tunnel-[00000012] Microsoft ISATAP Adapter 44:1E:A1:06:52:B2 : -l2nd-[00000013] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000014] Microsoft ISATAP Adapter 44:1E:A1:06:52:B0 : -l2nd-[00000015] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000016] Microsoft ISATAP Adapter
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 103 of 133
Computer Name
Operating System CPU RAM Analysis
: -tunnel-[00000017] Microsoft Teredo Tunneling Adapter DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows Server 2008 R2 Standard OS Architecture: 64-bit OS Virtual Memory: 24560 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 5/5/2011 1:35:03 AM Active Anti-virus: Symantec Endpoint Protection Active Anti-spyware: Symantec Endpoint Protection Active Firewall: Symantec Endpoint Protection
HSGMGMT2-PC
Windows 7 Professional
Intel(R) Core(TM) i5-3470 CPU @ 3.20GHz
8192 MB
Last 5 System Error Msgs: 5-3-2018 8:22:04 AM 3221235482 The server {D085A4AB-CAB1-4729-9DF8-FCEEDDBD19E4} did not register with DCOM within the required timeout. 5-2-2018 4:37:39 PM 3221235482 The server {995C996E-D918-4A8C-A302-45719A6F4EA7} did not register with DCOM within the required timeout. 5-2-2018 8:03:01 AM 1129 The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has succesfully processed. If you do not see a success message for several hours, then contact your administrator. 5-1-2018 4:38:20 PM 3221235482 The server {D085A4AB-CAB1-4729-9DF8-FCEEDDBD19E4} did not register with DCOM within the required timeout. 5-1-2018 4:38:05 PM 3221232483 A timeout (30000 milliseconds) was reached while waiting for a transaction response from the lmhosts service. Last 5 Application Error Msgs: 5-4-2018 8:09:17 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 104 of 133
Computer Name
Operating System CPU RAM Analysis
corrected. 5-3-2018 8:21:06 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. 5-3-2018 8:17:41 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. 5-1-2018 8:03:54 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. 4-30-2018 8:10:47 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Scheduled Tasks: Adobe Acrobat Update Task AdobeGCInvoker-1.0-KHA-anwar AdobeGCInvoker-1.0-KHA-cherrie AdobeGCInvoker-1.0-KHA-julio SidebarExecute Disk Capacity: C: 453.76 GB, 406.9 GB free, 10.33% used Service Tag: 2UA30203B5 CPU Count: 1 CPU Core Count: 4 Make and Model: Hewlett-Packard/HP Compaq Pro 6300 SFF Memory Banks: DIMM4 : DIMM-Synchronous-2048 Mb-1333 MHz DIMM3 : DIMM-Synchronous-2048 Mb-1333 MHz DIMM2 : DIMM-Synchronous-2048 Mb-1333 MHz
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 105 of 133
Computer Name
Operating System CPU RAM Analysis
DIMM1 : DIMM-Synchronous-2048 Mb-1333 MHz <slot available> CPUs: Intel(R) Core(TM) i5-3470 CPU @ 3.20GHz : CPU0-4 NICs: : -RasSstp-[00000000] WAN Miniport (SSTP) : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP) : -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE) : -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) 10:60:4B:71:C7:45 : 192.168.10.43;fe80::e91d:5962:3126:51a2-e1cexpress-[00000007] Intel(R) 82579LM Gigabit Network Connection : -NdisWan-[00000008] WAN Miniport (IP) : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter : -tunnel-[00000011] Microsoft ISATAP Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Professional OS Architecture: 64-bit OS Virtual Memory: 16144 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 6/23/2017 12:24:08 PM Active Anti-virus: Symantec Endpoint Protection, Windows Defender Active Anti-spyware: Symantec Endpoint Protection Active Firewall: Symantec Endpoint Protection
KATHY-PC Windows 7 Professional
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 106 of 133
Computer Name
Operating System CPU RAM Analysis
KCKADMIN-BARBAR
Windows 7 Professional
Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz
8192 MB
Last 5 System Error Msgs: 4-12-2018 8:01:17 AM 5719 This computer was not able to set up a secure session with a domain controller in domain KHA due to the following: There are currently no logon servers available to service the logon request. This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator. ADDITIONAL INFO If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain. 4-11-2018 9:58:35 AM 36887 The following fatal alert was received: 70. Last 5 Application Error Msgs: 5-4-2018 7:49:40 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. 5-3-2018 8:00:29 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. 5-2-2018 7:57:08 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. 5-1-2018 7:49:06 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. 4-30-2018 7:53:08 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Scheduled Tasks: Adobe Acrobat Update Task Adobe Flash Player Updater GoogleUpdateTaskMachineCore GoogleUpdateTaskMachineUA
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 107 of 133
Computer Name
Operating System CPU RAM Analysis
Remote Listening Ports: RDP (3389/TCP) Disk Capacity: C: 457.6 GB, 410.41 GB free, 10.31% used Service Tag: 2UA23418V0 CPU Count: 1 CPU Core Count: 4 Make and Model: Hewlett-Packard/HP Compaq 8200 Elite SFF PC Memory Banks: DIMM1 : DIMM-Synchronous-2048 Mb-1333 MHz DIMM2 : DIMM-Synchronous-4096 Mb-1333 MHz <slot available> DIMM3 : DIMM-Synchronous-2048 Mb-1333 MHz CPUs: Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz : CPU0-4 System Slots: System Slot0 : X16PCIEXP-Available-OK System Slot1 : X4PCIEXP-Available-OK System Slot2 : X1PCIEXP1-Available-OK System Slot3 : PCI1-Available-OK NICs: : -RasSstp-[00000000] WAN Miniport (SSTP) : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP) : -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE) : -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) 24:BE:05:25:A9:60 : 192.168.10.61;fe80::a582:340b:6021:d0fc-e1cexpress-[00000007] Intel(R) 82579LM Gigabit Network Connection : -NdisWan-[00000008] WAN Miniport (IP) : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 108 of 133
Computer Name
Operating System CPU RAM Analysis
OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Professional OS Architecture: 64-bit OS Virtual Memory: 16160 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 4/4/2017 11:49:50 AM Active Anti-virus: Symantec Endpoint Protection, Windows Defender Active Anti-spyware: Symantec Endpoint Protection Active Firewall: Symantec Endpoint Protection
KCKADMIN-HP Windows 7 Professional
KCKADMIN-LISA
Windows 7 Professional
Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz
8192 MB
Last 5 System Error Msgs: 5-2-2018 4:29:44 PM 3221235482 The server {995C996E-D918-4A8C-A302-45719A6F4EA7} did not register with DCOM within the required timeout. 5-1-2018 4:32:47 PM 3221235482 The server {995C996E-D918-4A8C-A302-45719A6F4EA7} did not register with DCOM within the required timeout. 4-30-2018 4:30:30 PM 3221235482 The server {995C996E-D918-4A8C-A302-45719A6F4EA7} did not register with DCOM within the required timeout. 4-26-2018 4:31:06 PM 3221235482 The server {995C996E-D918-4A8C-A302-45719A6F4EA7} did not register with DCOM within the required timeout. 4-25-2018 4:35:20 PM 3221235482 The server {995C996E-D918-4A8C-A302-45719A6F4EA7} did not register with DCOM within the required timeout. Last 5 Application Error Msgs: 5-4-2018 9:07:35 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. 5-4-2018 8:13:42 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 109 of 133
Computer Name
Operating System CPU RAM Analysis
corrected. 5-3-2018 8:17:51 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. 5-2-2018 8:17:10 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. 5-1-2018 8:24:36 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Scheduled Tasks: Adobe Acrobat Update Task Adobe Flash Player Updater GoogleUpdateTaskMachineCore GoogleUpdateTaskMachineUA Remote Listening Ports: RDP (3389/TCP) Disk Capacity: C: 457.6 GB, 401.97 GB free, 12.16% used Service Tag: 2UA23418VL CPU Count: 1 CPU Core Count: 4 Make and Model: Hewlett-Packard/HP Compaq 8200 Elite SFF PC Memory Banks: DIMM1 : DIMM-Synchronous-2048 Mb-1333 MHz <slot available> DIMM3 : DIMM-Synchronous-4096 Mb-1333 MHz DIMM4 : DIMM-Synchronous-2048 Mb-1333 MHz CPUs: Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz : CPU0-4 System Slots:
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 110 of 133
Computer Name
Operating System CPU RAM Analysis
System Slot0 : X16PCIEXP-Available-OK System Slot1 : X4PCIEXP-Available-OK System Slot2 : X1PCIEXP1-Available-OK System Slot3 : PCI1-Available-OK NICs: : -RasSstp-[00000000] WAN Miniport (SSTP) : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP) : -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE) : -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) B4:B5:2F:A9:85:49 : 192.168.10.58;fe80::f5ed:e240:b3a2:6cfe-e1cexpress-[00000007] Intel(R) 82579LM Gigabit Network Connection : -NdisWan-[00000008] WAN Miniport (IP) : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Professional OS Architecture: 64-bit OS Virtual Memory: 16160 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 4/4/2017 12:50:54 PM Active Anti-virus: Symantec Endpoint Protection, Windows Defender Active Anti-spyware: Symantec Endpoint Protection Active Firewall: Symantec Endpoint Protection
KCKADMIN-MELIND
Windows 7 Professional
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 111 of 133
Computer Name
Operating System CPU RAM Analysis
KCK-FRONTDESK
Windows 7 Professional
Intel(R) Core(TM) i3-2120 CPU @ 3.30GHz
4096 MB
Last 5 System Error Msgs: 4-27-2018 5:37:54 PM 3221232498 The following boot-start or system-start driver(s) failed to load: eeCtrl 4-18-2018 8:18:14 AM 41 The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 4-18-2018 8:18:45 AM 2147489656 The previous system shutdown at 8:16:10 AM on 4/18/2018 was unexpected. 4-18-2018 8:16:10 AM 3221232483 A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Spooler service. 4-18-2018 8:15:40 AM 3221232483 A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Spooler service. Last 5 Application Error Msgs: 5-4-2018 8:22:05 AM 3221226480 A problem prevented Customer Experience Improvement Program data from being sent to Microsoft, (Error 80004005). 5-4-2018 8:10:15 AM 502 Failed to apply policy and redirect folder "Documents" to "\\apps1\Home\frontdesk\My Documents". Redirection options=0x9001. The following error occurred: "Can not create folder "\\apps1\Home\frontdesk\My Documents"". Error details: "Access is denied. ". 5-4-2018 8:10:15 AM 502 Failed to apply policy and redirect folder "Music" to "\\apps1\Home\frontdesk\My Documents\My Music". Redirection options=0x9001. The following error occurred: "Can not create folder "\\apps1\Home\frontdesk\My Documents\My Music"". Error details: "Access is denied. ". 5-4-2018 8:10:15 AM 502 Failed to apply policy and redirect folder "Pictures" to "\\apps1\Home\frontdesk\My Documents\My Pictures". Redirection options=0x9001. The following error occurred: "Can not create folder "\\apps1\Home\frontdesk\My Documents\My Pictures"". Error details: "Access is denied. ". 5-4-2018 8:10:15 AM 502 Failed to apply policy and redirect folder "Videos" to "\\apps1\Home\frontdesk\My Documents\My Videos". Redirection options=0x9001. The following error occurred: "Can not create folder "\\apps1\Home\frontdesk\My Documents\My Videos"". Error details: "Access is denied. ". Scheduled Tasks: HPCeeScheduleForKCK-FRONTDESK$ RMCreator User_Feed_Synchronization-{04C0E195-33A1-4255-BFEA-FF895A5F4AA5} User_Feed_Synchronization-{5E66AB2E-7057-4206-B3CD-55E4BBDA99EC} User_Feed_Synchronization-{934ABDF9-E31A-41A4-86B5-108D10578103} User_Feed_Synchronization-{A7B0AF56-D6CB-434D-B3B2-0320D0A7B703} User_Feed_Synchronization-{A9211E07-5365-4CEE-B045-657D00F7B952} User_Feed_Synchronization-{A9AA7D07-935C-42E7-AB75-B62D88006336} User_Feed_Synchronization-{ACA3AF9F-7007-418C-9BBB-14B29D595FB7} User_Feed_Synchronization-{B637169D-F607-4ED9-9800-1B2FCE986793}
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 112 of 133
Computer Name
Operating System CPU RAM Analysis
User_Feed_Synchronization-{C8B616ED-540F-4915-ABFD-A88023FC763D} User_Feed_Synchronization-{CCE054D7-7DA7-418E-A188-7559A404A6EB} User_Feed_Synchronization-{EC566EB3-C50B-4E7A-8B6C-FB18A19D7441} Disk Capacity: C: 223.57 GB, 149.62 GB free, 33.08% used D: 9.22 GB, 1.12 GB free, 87.85% used Service Tag: 2UA206135R CPU Count: 1 CPU Core Count: 2 Make and Model: Hewlett-Packard/HP Compaq 6200 Pro MT PC Memory Banks: DIMM1 : DIMM-Synchronous-4096 Mb-1333 MHz <slot available> <slot available> CPUs: Intel(R) Core(TM) i3-2120 CPU @ 3.30GHz : CPU0-2 System Slots: System Slot0 : X16PCIEXP-Available-OK System Slot1 : X1PCIEXP2-Available-OK System Slot2 : X1PCIEXP1-Available-OK System Slot3 : PCI1-Available-OK NICs: : -RasSstp-[00000000] WAN Miniport (SSTP) : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP) : -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE) : -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) 08:2E:5F:2D:89:31 : 192.168.10.42;fe80::4020:b315:6cff:ab94-e1cexpress-[00000007] Intel(R) 82579LM Gigabit Network Connection : -NdisWan-[00000008] WAN Miniport (IP) : -tunnel-[00000009] Microsoft ISATAP Adapter : -AsyncMac-[00000010] RAS Async Adapter : -tunnel-[00000011] Microsoft 6to4 Adapter : -tunnel-[00000012] Microsoft Teredo Tunneling Adapter : -tunnel-[00000013] Microsoft ISATAP Adapter
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 113 of 133
Computer Name
Operating System CPU RAM Analysis
DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Professional OS Architecture: 64-bit OS Virtual Memory: 7968 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 3/7/2012 1:31:50 PM Active Anti-virus: Symantec Endpoint Protection, Windows Defender Active Anti-spyware: Symantec Endpoint Protection Active Firewall: Symantec Endpoint Protection
MAINTSUPPLY-PC
Windows 7 Professional
AMD Phenom(tm) II X2 B55 Processor
4097 MB
Last 5 System Error Msgs: 5-4-2018 7:44:56 AM 5719 This computer was not able to set up a secure session with a domain controller in domain KHA due to the following: There are currently no logon servers available to service the logon request. This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator. ADDITIONAL INFO If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain. 5-2-2018 7:32:43 AM 5719 This computer was not able to set up a secure session with a domain controller in domain KHA due to the following: There are currently no logon servers available to service the logon request. This may lead to authentication problems. Make sure that this computer is connected to the network. If the problem persists, please contact your domain administrator. ADDITIONAL INFO If this computer is a domain controller for the specified domain, it sets up the secure session to the primary domain controller emulator in the specified domain. Otherwise, this computer sets up the secure session to any domain controller in the specified domain. 5-2-2018 7:26:52 AM 41 The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly. 5-2-2018 7:27:08 AM 2147489656 The previous system shutdown at 2:39:15 AM on 5/2/2018
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 114 of 133
Computer Name
Operating System CPU RAM Analysis
was unexpected. 4-23-2018 9:43:49 PM 1129 The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has succesfully processed. If you do not see a success message for several hours, then contact your administrator. Last 5 Application Error Msgs: 5-4-2018 7:45:16 AM 502 Failed to apply policy and redirect folder "Documents" to "\\apps1\Home\jhatcliff\My Documents". Redirection options=0x9001. The following error occurred: "Can not create folder "\\apps1\Home\jhatcliff\My Documents"". Error details: "Access is denied. ". 5-4-2018 7:45:16 AM 502 Failed to apply policy and redirect folder "Music" to "\\apps1\Home\jhatcliff\My Documents\My Music". Redirection options=0x9001. The following error occurred: "Can not create folder "\\apps1\Home\jhatcliff\My Documents\My Music"". Error details: "Access is denied. ". 5-4-2018 7:45:16 AM 502 Failed to apply policy and redirect folder "Pictures" to "\\apps1\Home\jhatcliff\My Documents\My Pictures". Redirection options=0x9001. The following error occurred: "Can not create folder "\\apps1\Home\jhatcliff\My Documents\My Pictures"". Error details: "Access is denied. ". 5-4-2018 7:45:15 AM 502 Failed to apply policy and redirect folder "Videos" to "\\apps1\Home\jhatcliff\My Documents\My Videos". Redirection options=0x9001. The following error occurred: "Can not create folder "\\apps1\Home\jhatcliff\My Documents\My Videos"". Error details: "Access is denied. ". 5-4-2018 7:45:07 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Scheduled Tasks: Adobe Flash Player Updater Disk Capacity: C: 193.68 GB, 160.22 GB free, 17.28% used Service Tag: 2UA113017B CPU Count: 1 CPU Core Count: 2 Make and Model: Hewlett-Packard/HP Compaq 6005 Pro SFF PC Memory Banks:
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 115 of 133
Computer Name
Operating System CPU RAM Analysis
<slot available> XMM3 : DIMM-Synchronous-2048 Mb-1333 MHz <slot available> XMM4 : DIMM-Synchronous-2048 Mb-1333 MHz SYSTEM ROM : Unknown-Nonvolatile-1 Mb-unknown MHz CPUs: AMD Phenom(tm) II X2 B55 Processor : CPU0-2 System Slots: System Slot0 : PCI1-Available-OK System Slot1 : PCI EXPRESS x1 SLOT 1 (PCIEx1 1)-Available-OK System Slot2 : PCI EXPRESS x1 SLOT 2 (PCIEx1 2)-Available-OK System Slot3 : PCI EXPRESS x16 SLOT (PCIEx16)-Available-OK NICs: : -RasSstp-[00000000] WAN Miniport (SSTP) : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP) : -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE) : -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) 78:AC:C0:A6:7C:D6 : 192.168.20.20;fe80::d4d1:a980:85fb:4134-b57nd60a-[00000007] Broadcom NetXtreme Gigabit Ethernet : -NdisWan-[00000008] WAN Miniport (IP) : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Professional OS Architecture: 64-bit OS Virtual Memory: 7168 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 116 of 133
Computer Name
Operating System CPU RAM Analysis
OS Install Date: 10/20/2014 9:59:01 AM Active Anti-virus: Symantec Endpoint Protection, Windows Defender Active Anti-spyware: Symantec Endpoint Protection Active Firewall: Symantec Endpoint Protection
TARS1-PC Windows 7 Professional
Intel(R) Core(TM)2 Duo CPU E8500 @ 3.16GHz
4096 MB
Last 5 System Error Msgs: 5-4-2018 10:26:24 AM 36887 The following fatal alert was received: 40. 5-4-2018 8:54:02 AM 36887 The following fatal alert was received: 20. 5-1-2018 1:57:42 PM 36887 The following fatal alert was received: 20. 4-30-2018 3:52:12 PM 36887 The following fatal alert was received: 20. 4-27-2018 4:34:15 PM 3221235482 The server {D085A4AB-CAB1-4729-9DF8-FCEEDDBD19E4} did not register with DCOM within the required timeout. Last 5 Application Error Msgs: 5-4-2018 8:09:17 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. 5-3-2018 8:26:40 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. 5-2-2018 8:04:44 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. 5-1-2018 8:07:37 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. 4-30-2018 8:15:48 AM 3221225482 Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected. Scheduled Tasks: Adobe Acrobat Update Task GoogleUpdateTaskMachineCore
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 117 of 133
Computer Name
Operating System CPU RAM Analysis
GoogleUpdateTaskMachineUA Microsoft_Hardware_Launch_ipoint_exe Microsoft_Hardware_Launch_itype_exe Microsoft_Hardware_Launch_mousekeyboardcenter_exe Microsoft_MKC_Logon_Task_ipoint.exe Microsoft_MKC_Logon_Task_itype.exe Disk Capacity: C: 226.31 GB, 171.29 GB free, 24.31% used Service Tag: 11BNJM1 CPU Count: 1 CPU Core Count: 2 Make and Model: Dell Inc./OptiPlex 960 Memory Banks: DIMM_1 : DIMM-Synchronous-2048 Mb-800 MHz <slot available> DIMM_2 : DIMM-Synchronous-2048 Mb-800 MHz <slot available> CPUs: Intel(R) Core(TM)2 Duo CPU E8500 @ 3.16GHz : CPU0-2 System Slots: System Slot0 : SLOT1-Available-OK System Slot1 : SLOT2-Available-OK System Slot2 : SLOT3-Available-OK System Slot3 : SLOT4-Available-OK NICs: : -RasSstp-[00000000] WAN Miniport (SSTP) : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP) : -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE) : -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) B8:AC:6F:81:E7:3F : 192.168.10.37;fe80::15b8:7d28:e63b:b7a6-e1kexpress-[00000007] Intel(R) 82567LM-3 Gigabit Network Connection : -NdisWan-[00000008] WAN Miniport (IP) : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 118 of 133
Computer Name
Operating System CPU RAM Analysis
: -tunnel-[00000011] Microsoft ISATAP Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Professional OS Architecture: 64-bit OS Virtual Memory: 7872 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 9/11/2015 4:02:03 PM Active Anti-virus: Symantec Endpoint Protection, Windows Defender Active Anti-spyware: Symantec Endpoint Protection Active Firewall: Symantec Endpoint Protection
TARW1-PC Windows 7 Professional
TARW2-PC Windows 7 Professional
Intel(R) Core(TM)2 Duo CPU E8500 @ 3.16GHz
4096 MB
Last 5 System Error Msgs: 4-13-2018 8:07:31 AM 1129 The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has succesfully processed. If you do not see a success message for several hours, then contact your administrator. Last 5 Application Error Msgs: 5-4-2018 8:22:56 AM 1024 Product: Adobe Acrobat Reader DC - Update '{AC76BA86-7AD7-0000-2550-AC0F174E6600}' could not be installed. Error code 1625. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127 5-3-2018 8:26:15 AM 1024 Product: Adobe Acrobat Reader DC - Update '{AC76BA86-7AD7-0000-2550-AC0F174E6600}' could not be installed. Error code 1625. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127 5-2-2018 8:12:44 AM 1024 Product: Adobe Acrobat Reader DC - Update '{AC76BA86-7AD7-
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 119 of 133
Computer Name
Operating System CPU RAM Analysis
0000-2550-AC0F174E6600}' could not be installed. Error code 1625. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127 5-1-2018 8:14:27 AM 1024 Product: Adobe Acrobat Reader DC - Update '{AC76BA86-7AD7-0000-2550-AC0F174E6600}' could not be installed. Error code 1625. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127 4-30-2018 8:24:44 AM 1024 Product: Adobe Acrobat Reader DC - Update '{AC76BA86-7AD7-0000-2550-AC0F174E6600}' could not be installed. Error code 1625. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127 Scheduled Tasks: Adobe Acrobat Update Task GoogleUpdateTaskMachineCore GoogleUpdateTaskMachineUA Disk Capacity: C: 272.89 GB, 228.5 GB free, 16.27% used Service Tag: CW1QTJ1 CPU Count: 1 CPU Core Count: 2 Make and Model: Dell Inc./OptiPlex 960 Memory Banks: DIMM_1 : DIMM-Synchronous-2048 Mb-800 MHz <slot available> DIMM_2 : DIMM-Synchronous-2048 Mb-800 MHz <slot available> CPUs: Intel(R) Core(TM)2 Duo CPU E8500 @ 3.16GHz : CPU0-2 System Slots: System Slot0 : SLOT1-Available-OK System Slot1 : SLOT2-Available-OK System Slot2 : SLOT3-Available-OK System Slot3 : SLOT4-Available-OK NICs: : -RasSstp-[00000000] WAN Miniport (SSTP) : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP)
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 120 of 133
Computer Name
Operating System CPU RAM Analysis
: -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE) : -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) 00:22:19:FF:08:A4 : 192.168.10.59;fe80::3430:1f96:b140:da97-e1kexpress-[00000007] Intel(R) 82567LM-3 Gigabit Network Connection : -NdisWan-[00000008] WAN Miniport (IP) : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter : -tunnel-[00000011] Microsoft ISATAP Adapter : -tunnel-[00000012] Microsoft Teredo Tunneling Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Professional OS Architecture: 64-bit OS Virtual Memory: 7872 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 8/27/2015 11:55:26 AM Active Anti-virus: Symantec Endpoint Protection, Windows Defender Active Anti-spyware: Symantec Endpoint Protection Active Firewall: Symantec Endpoint Protection
UTILITY1 Microsoft Windows Server 2008 R2 Standard
Intel(R) Xeon(R) CPU E5506 @ 2.13GHz
12288 MB
Last 5 System Error Msgs: 5-4-2018 10:54:26 AM 36888 The following fatal alert was generated: 40. The internal error state is 1205. 5-4-2018 10:54:26 AM 36874 An TLS 1.0 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The SSL connection request has failed. 5-4-2018 9:52:12 AM 1111 Driver Citrix Universal Printer required for printer NPI37ABA5 (HP LaserJet 600 M601) (from DOUGLAS) in session 43 is unknown. Contact the administrator to install the driver before you log in again.
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 121 of 133
Computer Name
Operating System CPU RAM Analysis
5-4-2018 9:52:08 AM 1111 Driver Citrix Universal Printer required for printer Microsoft XPS Document Writer (from GARYA6996) in session 42 is unknown. Contact the administrator to install the driver before you log in again. 5-4-2018 9:52:07 AM 1111 Driver Citrix Universal Printer required for printer Send To OneNote 2013 (from GARYA6996) in session 42 is unknown. Contact the administrator to install the driver before you log in again. Last 5 Application Error Msgs: 5-4-2018 1:25:05 PM 2147486156 DNS alert raised. Alert 3 triggered: Unable to contact DNS server 5-4-2018 12:03:46 PM 2147486156 DNS alert raised. Alert 3 triggered: Unable to contact DNS server 5-4-2018 11:52:46 AM 13032 Many client computers have not reported back to the server in the last 30 days. 9 have been detected so far. 5-4-2018 5:52:42 AM 13032 Many client computers have not reported back to the server in the last 30 days. 9 have been detected so far. 5-4-2018 3:45:07 AM 2147486156 DNS alert raised. Alert 3 triggered: Unable to contact DNS server Scheduled Tasks: SQL Backup Remote Listening Ports: FTP (21/TCP) SMTP (25/TCP) HTTP (80/TCP) HTTPS (443/TCP) RDP (3389/TCP) Disk Capacity: C: 80 GB, 13.4 GB free, 83.25% used E: 740.21 GB, 525.5 GB free, 29.01% used J: 99.87 GB, 56.95 GB free, 42.98% used Service Tag: USE135N295 CPU Count: 2 CPU Core Count: 8 Windows Key: HMG6P-C7VGP-47GJ9-TWBD4-2YYCD Make and Model: HP/ProLiant DL380 G7 Memory Banks: <slot available>
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 122 of 133
Computer Name
Operating System CPU RAM Analysis
PROC 2 DIMM 3A : DIMM-Synchronous-2048 Mb-1333 MHz PROC 2 DIMM 6B : DIMM-Synchronous-2048 Mb-1333 MHz PROC 2 DIMM 9C : DIMM-Synchronous-2048 Mb-1333 MHz PROC 1 DIMM 3A : DIMM-Synchronous-2048 Mb-1333 MHz <slot available> <slot available> <slot available> PROC 1 DIMM 6B : DIMM-Synchronous-2048 Mb-1333 MHz <slot available> <slot available> <slot available> PROC 1 DIMM 9C : DIMM-Synchronous-2048 Mb-1333 MHz CPUs: Intel(R) Xeon(R) CPU E5506 @ 2.13GHz : CPU0-4 Intel(R) Xeon(R) CPU E5506 @ 2.13GHz : CPU1-4 System Slots: System Slot0 : PCI-E Slot 1-Available-OK System Slot1 : PCI-E Slot 2-Available-OK System Slot2 : PCI-E Slot 3-Available-OK NICs: : -RasSstp-[00000000] WAN Miniport (SSTP) : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP) : -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE) : -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) 64:31:50:4E:80:98 : 172.16.1.12-l2nd-[00000007] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000008] Microsoft ISATAP Adapter : -NdisWan-[00000009] WAN Miniport (IP) : -l2nd-[00000010] HP NC382i DP Multifunction Gigabit Server Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000011] RAS Async Adapter : -tunnel-[00000012] Microsoft ISATAP Adapter 64:31:50:4E:80:94 : 192.168.10.14;fe80::44b1:436b:c06c:3c5a-l2nd-[00000013] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000014] Microsoft ISATAP Adapter 64:31:50:4E:80:96 : 172.16.2.12-l2nd-[00000015] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000016] Microsoft ISATAP Adapter : -tunnel-[00000017] Microsoft Teredo Tunneling Adapter
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 123 of 133
Computer Name
Operating System CPU RAM Analysis
DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows Server 2008 R2 Standard OS Architecture: 64-bit OS Virtual Memory: 24560 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 5/26/2011 12:26:07 PM Active Anti-virus: Symantec Endpoint Protection Active Anti-spyware: Symantec Endpoint Protection Active Firewall: Symantec Endpoint Protection
VERONICAPC Windows 7 Professional
Intel(R) Core(TM)2 Duo CPU E7500 @ 2.93GHz
4096 MB
Last 5 System Error Msgs: 5-4-2018 8:23:42 AM 36887 The following fatal alert was received: 20. 5-4-2018 8:22:49 AM 36887 The following fatal alert was received: 20. 5-4-2018 8:18:11 AM 3221232472 The GoToAssist Remote Support Customer service failed to start due to the following error: The system cannot find the file specified. 5-4-2018 8:18:10 AM 3221232475 The NTRU TSS v1.2.1.29 TCS service depends the following service: TBS. This service might not be installed. 5-3-2018 9:18:49 AM 3221232472 The GoToAssist Remote Support Customer service failed to start due to the following error: The system cannot find the file specified. Last 5 Application Error Msgs: 5-4-2018 8:26:50 AM 1000 Faulting application name: iexplore.exe, version: 11.0.9600.18858, time stamp: 0x5a020fde Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x00196ab0 Faulting process id: 0x1294 Faulting application start time: 0x01d3e3aaa316823a Faulting application path: C:\Program Files\Internet Explorer\iexplore.exe Faulting module path: unknown Report Id: cd20bf20-4f9e-11e8-b884-842b2bab6d05 5-4-2018 8:18:33 AM 502 Failed to apply policy and redirect folder "Documents" to "\\apps1\Home\veronica\My Documents". Redirection options=0x9001. The following error occurred: "Failed to redirect because the destination directory "\\apps\Home\veronica\My Documents" is offline". Error details: "The network path was not found. ".
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 124 of 133
Computer Name
Operating System CPU RAM Analysis
5-4-2018 8:18:33 AM 502 Failed to apply policy and redirect folder "Music" to "\\apps1\Home\veronica\My Documents\My Music". Redirection options=0x9001. The following error occurred: "Failed to redirect because the destination directory "\\apps\Home\veronica\My Documents\My Music" is offline". Error details: "The network path was not found. ". 5-4-2018 8:18:33 AM 502 Failed to apply policy and redirect folder "Videos" to "\\apps1\Home\veronica\My Documents\My Videos". Redirection options=0x9001. The following error occurred: "Failed to redirect because the destination directory "\\apps\Home\veronica\My Documents\My Videos" is offline". Error details: "The network path was not found. ". 5-4-2018 8:18:29 AM 1542 Windows cannot load classes registry file. DETAIL - Access is denied. Scheduled Tasks: Adobe Acrobat Update Task Adobe Flash Player Updater G2MUpdateTask-S-1-5-21-85988526-1757768791-1852903728-2249 G2MUploadTask-S-1-5-21-85988526-1757768791-1852903728-2249 GoogleUpdateTaskMachineCore GoogleUpdateTaskMachineUA {40EF6AE9-3087-4E74-B91D-1902CDD4DAC4} Disk Capacity: C: 297.32 GB, 241.83 GB free, 18.66% used Service Tag: 1ZKVNN1 CPU Count: 1 CPU Core Count: 2 Windows Key: 32KD2-K9CTF-M3DJT-4J3WC-733WD Make and Model: Dell Inc./OptiPlex 380 Memory Banks: DIMM_1 : DIMM-Synchronous-2048 Mb-1066 MHz DIMM_2 : DIMM-Synchronous-2048 Mb-1066 MHz <slot available> CPUs: Intel(R) Core(TM)2 Duo CPU E7500 @ 2.93GHz : CPU0-2 System Slots: System Slot0 : SLOT1-Available-OK System Slot1 : SLOT2-Available-OK NICs:
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 125 of 133
Computer Name
Operating System CPU RAM Analysis
: -RasSstp-[00000000] WAN Miniport (SSTP) : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP) : -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE) : -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) 84:2B:2B:AB:6D:05 : 192.168.10.38;fe80::9903:ac97:e66f:6364-k57nd60x-[00000007] Broadcom NetLink (TM) Gigabit Ethernet : -NdisWan-[00000008] WAN Miniport (IP) : -tunnel-[00000009] Microsoft ISATAP Adapter : -AsyncMac-[00000010] RAS Async Adapter : -tunnel-[00000011] Microsoft 6to4 Adapter : -tunnel-[00000012] Microsoft ISATAP Adapter : -tunnel-[00000013] Microsoft Teredo Tunneling Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Professional OS Architecture: 32-bit OS Virtual Memory: 6592 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 12/15/2010 11:16:19 AM PAE Enabled: True Active Anti-virus: Symantec AntiVirus, Windows Defender Active Anti-spyware: Symantec AntiVirus Active Firewall: N/A
XENAPP01 Microsoft Windows Server 2008 R2 Standard
Intel(R) Xeon(R) CPU E5506 @
12288 MB
Last 5 System Error Msgs: 5-4-2018 2:32:57 PM 36887 The following fatal alert was received: 20. 5-4-2018 1:58:46 PM 36887 The following fatal alert was received: 20.
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 126 of 133
Computer Name
Operating System CPU RAM Analysis
2.13GHz 5-4-2018 1:39:05 PM 36887 The following fatal alert was received: 20. 5-4-2018 12:22:55 PM 36887 The following fatal alert was received: 20. 5-4-2018 11:37:22 AM 36887 The following fatal alert was received: 20. Last 5 Application Error Msgs: 5-4-2018 11:55:37 AM 1000 Faulting application name: HMSUpdateCheck.exe, version: 3.5.4.1, time stamp: 0x4c3f0017 Faulting module name: dhcpcsvc.DLL, version: 6.1.7600.16385, time stamp: 0x4a5bd9b5 Exception code: 0xc0000005 Fault offset: 0x00001cc5 Faulting process id: 0x2554 Faulting application start time: 0x01d3e3c8b92c6b38 Faulting application path: M:\HMS\deploy\HMSUpdateCheck.exe Faulting module path: C:\Windows\system32\dhcpcsvc.DLL Report Id: f7593238-4fbb-11e8-8764-9c8e992ea026 5-4-2018 11:50:27 AM 1000 Faulting application name: IEXPLORE.EXE, version: 11.0.9600.18666, time stamp: 0x58f30f27 Faulting module name: banner.zxt_unloaded, version: 0.0.0.0, time stamp: 0x4d08284b Exception code: 0xc0000005 Fault offset: 0x064f2aca Faulting process id: 0x6124 Faulting application start time: 0x01d3e3b38246542c Faulting application path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Faulting module path: banner.zxt Report Id: 3efdea08-4fbb-11e8-8764-9c8e992ea026 5-4-2018 11:49:49 AM 1000 Faulting application name: IEXPLORE.EXE, version: 11.0.9600.18666, time stamp: 0x58f30f27 Faulting module name: banner.zxt_unloaded, version: 0.0.0.0, time stamp: 0x4d08284b Exception code: 0xc0000005 Fault offset: 0x065301b8 Faulting process id: 0x6124 Faulting application start time: 0x01d3e3b38246542c Faulting application path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Faulting module path: banner.zxt Report Id: 28124ca8-4fbb-11e8-8764-9c8e992ea026 5-4-2018 11:33:40 AM 1504 Windows Windows cannot update your roaming profile completely. Check previous events for more details. 5-4-2018 11:05:54 AM 3221226477 Windows cannot access the file for one of the following reasons: there is a problem with the network connection, the disk that the file is stored on, or the storage drivers installed on this computer; or the disk is missing. Windows closed the program winTAR because of this error. Program: winTAR File: The error value is listed in the Additional Data section. User Action 1. Open the file again. This situation might be a temporary problem that corrects itself when the program runs again. 2. If the file still cannot be accessed and - It is on the network, your network administrator should verify that there is not a problem with the network and that the server can be contacted. - It is on a removable disk, for example, a floppy disk or CD-ROM, verify that the disk is fully inserted into the computer. 3. Check and repair the file system by running CHKDSK. To run CHKDSK, click Start, click Run, type CMD, and then click OK. At the command prompt, type CHKDSK /F, and then press ENTER. 4. If the problem persists, restore the file from a backup copy. 5. Determine whether other files on the same disk can be opened. If not, the disk might be damaged. If it is a hard disk, contact your administrator or computer hardware vendor for further assistance. Additional Data Error value: C00000C4 Disk type: 0 Scheduled Tasks: Adobe Flash Player Updater
System Slot0 : PCI-E Slot 1-Available-OK System Slot1 : PCI-E Slot 2-Available-OK NICs: : -RasSstp-[00000000] WAN Miniport (SSTP) : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP) : -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE) : -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) 9C:8E:99:2E:A0:1E : -l2nd-[00000007] HP NC382i DP Multifunction Gigabit Server Adapter 9C:8E:99:2E:A0:24 : -l2nd-[00000008] HP NC382i DP Multifunction Gigabit Server Adapter : -NdisWan-[00000009] WAN Miniport (IP) : -tunnel-[00000010] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000011] RAS Async Adapter : -tunnel-[00000012] Microsoft ISATAP Adapter 9C:8E:99:2E:A0:26 : -l2nd-[00000013] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000014] Microsoft ISATAP Adapter 9C:8E:99:2E:A0:1C : 192.168.10.16;fe80::f182:c108:6f5c:f7a0-l2nd-[00000015] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000016] Microsoft ISATAP Adapter : -tunnel-[00000017] Microsoft Teredo Tunneling Adapter DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows Server 2008 R2 Standard OS Architecture: 64-bit OS Virtual Memory: 24560 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 5/25/2011 11:41:04 PM Active Anti-virus: Symantec Endpoint Protection, Windows Defender
Full Detail Report NETWORK ASSESSMENT
PROPRIETARY & CONFIDENTIAL Page 130 of 133
Computer Name
Operating System CPU RAM Analysis
Active Anti-spyware: Symantec Endpoint Protection, Windows Defender Active Firewall: Symantec Endpoint Protection
XENAPP02 Microsoft Windows Server 2008 R2 Standard
Intel(R) Xeon(R) CPU E5506 @ 2.13GHz
12288 MB
Last 5 System Error Msgs: 5-4-2018 12:11:55 PM 36887 The following fatal alert was received: 20. 5-4-2018 11:41:10 AM 36887 The following fatal alert was received: 20. 5-4-2018 9:44:13 AM 36887 The following fatal alert was received: 40. 5-4-2018 9:15:31 AM 36887 The following fatal alert was received: 20. 5-4-2018 8:44:42 AM 3221235482 The server {EC9100F8-5918-4F1B-9CC1-4D34A64E0FE0} did not register with DCOM within the required timeout. Last 5 Application Error Msgs: 5-4-2018 2:08:55 PM 1000 Faulting application name: HMSUpdateCheck.exe, version: 3.5.4.1, time stamp: 0x4c3f0017 Faulting module name: dhcpcsvc.DLL, version: 6.1.7600.16385, time stamp: 0x4a5bd9b5 Exception code: 0xc0000005 Fault offset: 0x00001bd9 Faulting process id: 0x627c Faulting application start time: 0x01d3e3db583f2b54 Faulting application path: M:\HMS\deploy\HMSUpdateCheck.exe Faulting module path: C:\Windows\system32\dhcpcsvc.DLL Report Id: 966b0849-4fce-11e8-8f78-101f743083de 5-4-2018 12:26:50 PM 1002 The program OUTLOOK.EXE version 14.0.7181.5000 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 3618 Start Time: 01d3e3a64466413c Termination Time: 31 Application Path: C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE Report Id: 4e0ae681-4fc0-11e8-8f78-101f743083de 5-4-2018 9:05:49 AM 1000 Faulting application name: HMSUpdateCheck.exe, version: 3.5.4.1, time stamp: 0x4c3f0017 Faulting module name: dhcpcsvc.DLL, version: 6.1.7600.16385, time stamp: 0x4a5bd9b5 Exception code: 0xc0000005 Fault offset: 0x00001b2d Faulting process id: 0xa2cc Faulting application start time: 0x01d3e3b10108a7d1 Faulting application path: M:\HMS\deploy\HMSUpdateCheck.exe Faulting module path: C:\Windows\system32\dhcpcsvc.DLL Report Id: 3f26c91d-4fa4-11e8-8f78-101f743083de 5-4-2018 8:43:45 AM 10005 Product: 64 Bit HP BiDi Channel Components Installer -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2753. The arguments are: ipm12.8444768D_9A2B_44BE_BD52_02FB1B25C55E, , 5-4-2018 8:19:30 AM 10005 Product: 64 Bit HP BiDi Channel Components Installer -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2753. The arguments are: ipm12.8444768D_9A2B_44BE_BD52_02FB1B25C55E, , Scheduled Tasks: Adobe Flash Player Updater DropboxUpdateTaskUserS-1-5-21-85988526-1757768791-1852903728-1023Core DropboxUpdateTaskUserS-1-5-21-85988526-1757768791-1852903728-1023UA DropboxUpdateTaskUserS-1-5-21-85988526-1757768791-1852903728-1033Core DropboxUpdateTaskUserS-1-5-21-85988526-1757768791-1852903728-1033UA
: -RasAgileVpn-[00000001] WAN Miniport (IKEv2) : -Rasl2tp-[00000002] WAN Miniport (L2TP) : -PptpMiniport-[00000003] WAN Miniport (PPTP) : -RasPppoe-[00000004] WAN Miniport (PPPOE) : -NdisWan-[00000005] WAN Miniport (IPv6) : -NdisWan-[00000006] WAN Miniport (Network Monitor) 10:1F:74:30:83:9C : 192.168.10.15;fe80::c827:7471:fe62:a7a8-l2nd-[00000007] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000008] Microsoft ISATAP Adapter : -NdisWan-[00000009] WAN Miniport (IP) 10:1F:74:30:83:9E : -l2nd-[00000010] HP NC382i DP Multifunction Gigabit Server Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000011] RAS Async Adapter : -tunnel-[00000012] Microsoft ISATAP Adapter 10:1F:74:30:83:DC : -l2nd-[00000013] HP NC382i DP Multifunction Gigabit Server Adapter 10:1F:74:30:83:DE : -l2nd-[00000014] HP NC382i DP Multifunction Gigabit Server Adapter : -tunnel-[00000015] Microsoft ISATAP Adapter : -tunnel-[00000016] Microsoft ISATAP Adapter : -tunnel-[00000017] Microsoft Teredo Tunneling Adapter DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows Server 2008 R2 Standard OS Architecture: 64-bit OS Virtual Memory: 24560 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 5/26/2011 12:16:30 AM Active Anti-virus: Symantec Endpoint Protection, Windows Defender Active Anti-spyware: Symantec Endpoint Protection, Windows Defender Active Firewall: Symantec Endpoint Protection