List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: [ActiveDir] How to identfiy if server is running on Virtual/ physical mode

Prev Next

You are not authorized to post a reply.

Author

Messages

mohanrav

Posts:82

06/23/2010 5:24 PM
Hi All, Is there any way to find out server is running on Virtual/ physical mode by checking any services or anywhere? other than naming conventions we use... -- Regards, Mohan R Level2-Server support Engineer.

bsonposh

Posts:408

06/24/2010 1:10 PM
I would avoid using integration tools as the check. I would use WMI. There are several reliable ways via WMI (ignoring malicious intent.) Sent from my iPad On Jun 24, 2010, at 6:11 AM, Nils Kaczenski <n.ka@gmx.de> wrote: > You could as well query for the presence of Hyper-V integration services or VMware tools. However, this depends on those services being present in the first place. > > Apart from these "soft" criteria there is no way for a machine to reliably find out if it's running on iron or not as the CPU virtualization features do not support such a distinction. This is what Rutkowska's "Blue Pill" uses for its attack. > > Nils > > > Am 23.06.2010 18:21, schrieb Mohan Ravindran: >> >> Hi All, >> >> Is there any way to find out server is running on Virtual/ physical mode by checking any services or anywhere? other than naming conventions we use... >> -- >> Regards, >> Mohan R >> Level2-Server support Engineer. >> >> > > -- > www.kaczenski.de > MVP Windows Server: Directory Services > Twitter > Die Bücher meiner Frau: Stephanie Schneider > www.faq-o-matic.net: Die technische Community > MVP-Profil: https://mvp.support.microsoft.com/profile/Nils.Kaczenski

bsonposh

Posts:408

06/24/2010 1:30 PM
IIRC that actually uses WMI Sent from my iPad On Jun 24, 2010, at 8:22 AM, "Castillo, Daniel (Directory Services)" <daniel.castillo@hp.com> wrote: > When you issue a “systeminfo” check out the System Manufacturer and System Model J > > > > System Manufacturer: VMware, Inc. > > System Model: VMware Virtual Platform > > > > System Manufacturer: Microsoft Corporation > > System Model: Virtual Machine > > > > Works fine on Hyper-V and ESX. > > > > > > ~D~ > > > > From: activedir-owner@mail.activedir.org [mailto:activedir-owner@mail.activedir.org] On Behalf Of Brandon Shell > Sent: Thursday, June 24, 2010 6:11 AM > To: activedir@mail.activedir.org > Subject: Re: [ActiveDir] How to identfiy if server is running on Virtual/ physical mode > > > > I would avoid using integration tools as the check. I would use WMI. There are several reliable ways via WMI (ignoring malicious intent.) > > > Sent from my iPad > > > On Jun 24, 2010, at 6:11 AM, Nils Kaczenski <n.ka@gmx.de> wrote: > > You could as well query for the presence of Hyper-V integration services or VMware tools. However, this depends on those services being present in the first place. > > Apart from these "soft" criteria there is no way for a machine to reliably find out if it's running on iron or not as the CPU virtualization features do not support such a distinction. This is what Rutkowska's "Blue Pill" uses for its attack. > > Nils > > > Am 23.06.2010 18:21, schrieb Mohan Ravindran: > > Hi All, > > > > Is there any way to find out server is running on Virtual/ physical mode by checking any services or anywhere? other than naming conventions we use... > -- > Regards, > Mohan R > Level2-Server support Engineer. > > > > > -- > www.kaczenski.de > MVP Windows Server: Directory Services > Twitter > Die Bücher meiner Frau: Stephanie Schneider > www.faq-o-matic.net: Die technische Community > MVP-Profil: https://mvp.support.microsoft.com/profile/Nils.Kaczenski

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] How to identfiy if server is running on Virtual/ physical mode

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads