Hey all,

I have just discovered a new version of PSTools has been released (I previously had v1.31).

http://www.sysinternals.com/ntw2k/fr.../pstools.shtml

For those who dont know it, it can perform the following on remote NT/2K systems:

PsExec - execute processes remotely
PsFile - shows files opened remotely
PsGetSid - display the SID of a computer or a user
PsKill - kill processes by name or process ID
PsInfo - list information about a system
PsList - list detailed information about processes
PsLoggedOn - see who's logged on locally and via resource sharing (full source is included)
PsLogList - dump event log records
PsPassswd - changes account passwords
PsService - view and control services
PsShutdown - shuts down and optionally reboots a computer
PsSuspend - suspends processes

I think that the remote host needs the server service running, as well as NETBIOS listening, and of course, you need to know the relevant account details.

Tools like this reinforce the importance of disabling non-essential services on your machine. Although this program can be helpful for admins, it can also be used for malicious purposes....