Registrations to Open-AudIT forums are now closed. To ask any new questions please visit Opmantek Community Questions.

Open-AudIT

What's on your network?
It is currently Sat Mar 30, 2024 1:39 am

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 3 posts ] 
Author Message
PostPosted: Wed Feb 04, 2015 1:22 pm 
Offline
Newbie

Joined: Wed Jan 28, 2015 10:24 am
Posts: 21
Hi

I am running Open-AudIT from the virtual appliance.

[code]You are running version 1.5.1 of Open-AudIT.
Your Host is: opmantek, and it's OS is Linux.
Your database platform is mysql (version 5.1.73).
Your web server is Apache/2.2.15 (CentOS) .
Your PHP version is 5.3.3 and it's running in timezone UTC.[/code]

Before I went to do audit of other computers I wanted to try to audit my own. The one that is running VirtualBox with Open-AudIT.

I did: Menu - Admin - Discovery - Discover a Windows computer

Then I entered Computer name (mine), IP of the computer I wanted to audit, username and password of a users (myself) that is part of the Administrator group. So in fact currently the user was logged in. I did not create an Open-AudIT dedicated user. Note that the Windows computer is not part of any domain.

All I get is this

[code]/usr/local/open-audit/other/open-audit.log
File size is 0 megabytes
Last 25 lines of the file:

Refresh this page for updated logs.
Most recent entries are at the top.

Feb 04 13:20:35 opmantek 3230 S:discover_subnet U:apache Discovery for kkk submitted at 2015-02-04 03:20:35 starting
Feb 04 03:20:35 opmantek 2379 C:discovery F:discover_subnet U:NMIS Discovery submitted for kkk.[/code]

I tried few times. When I run the Audit this PC script, everything worked fine.

Thank you for any help.

R


Top
 Profile  
Reply with quote  
PostPosted: Fri Feb 06, 2015 5:38 am 
Offline
Contributor
User avatar

Joined: Thu Mar 02, 2006 4:41 am
Posts: 205
Location: Massachusetts
Here is how I handle that. First, copy the audit_windows.vbs file to a directory on your workstation. Make sure the script has the correct URL for the Open Audit server. This also requires you to know a local admin user on remote systems. I run this from a workstation using local administrator account, and all the remote systems have the same local admin password. Run a batch file from same directory, looks like this:

echo off
cscript audit_windows.vbs 10.0.0.18 >>I:\temp\52vlan%date:~12,2%%date:~4,2%%date:~7,2%.txt
cscript audit_windows.vbs 10.0.0.19 >>I:\temp\52vlan%date:~12,2%%date:~4,2%%date:~7,2%.txt
cscript audit_windows.vbs 10.0.0.22 >>I:\temp\52vlan%date:~12,2%%date:~4,2%%date:~7,2%.txt
cscript audit_windows.vbs 10.0.0.58 >>I:\temp\52vlan%date:~12,2%%date:~4,2%%date:~7,2%.txt
EXIT


I have a batch file for each vlan in our environment and each batch file runs daily via sceduled tasks (I'm using Windows)

You really don't need to output to text files except for trying to figure out which systems didn't audit. I clean the directory up of *.txt files with another cleanup batch file that runs weekly.

If you can't run this as I do with the same local admin user, you can specify username and passwords on each line:

cscript audit_windows.vbs strcomputer=win118 strUser=win118\administrator strPass=YourPassword!

_________________
Server Info: running on a CentOS 7 vm
OA Version: 2.0.6 @ 500 devices


Top
 Profile  
Reply with quote  
PostPosted: Fri Feb 06, 2015 9:10 am 
Offline
Site Admin
User avatar

Joined: Mon Jun 07, 2004 11:48 am
Posts: 1964
Location: Brisbane, Australia
You should also be able to audit the Windows target via the web interface.
Use the target's hostname as the domain.
Use the Administrator account.

If it still doesn't work, check the wiki page for Target Client Configuration, here - [quote]https://community.opmantek.com/display/OA/Target+Client+Configuration
.

_________________
Support and Development hours available from [url=https://opmantek.com]Opmantek[/url].
Please consider a purchase to help make Open-AudIT better for everyone.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 3 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group