I've written a script to check the members of the Remote Desktop Users group on the computers in our domain. I'm using the same method I've seen in every sample script I've looked at that accesses the SAM database.
Set objGroup = GetObject("WinNT://computerxyz/Remote Desktop Users,group")
I've encountered problems with the computers that have the Windows Firewall enabled. Through research, I found that the command uses port 445 to accomplish the task. I know I can write a GPO to enable 445 for the domain profile only, but I'm concerned that port 445 has been exploited in so many viruses. Even if I limit port 445 to the domain profile, I'm still opening a door for potential issues. Is there a more secure way to accomplish this?
Ken Kemp Eddy County, NM IT