Here are some tricks that I use. They are pretty obvious but if you use
a default config on NT it is pretty insecure.
Use NBTSTAT -A 123.123.123.123 (use the ip of a known nt box)
this will return the machine name.
Then put the Machine name and IP address in your lmhosts file.
type NBTSTAT -R
This will refresh the netbios names.
next you can type commands like
NET VIEW \\machine (shows shares)
dir \\machine\share (lists shares if open )
and you can even use User Manager for Domains, Chose Select Domain and
put in \\machine.
This will give you a listing of there users.
After dinking around a little bit you will find out how insecure NT is
with a default config.
This page is last updated on 1/18/97