Open-AudIT

What's on your network?
It is currently Fri Jan 19, 2018 9:37 pm

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 4 posts ] 
Author Message
PostPosted: Thu Mar 01, 2007 8:29 am 
Offline
Helper

Joined: Sat Sep 17, 2005 7:15 am
Posts: 71
Windows XP, 2003, etc. have an actual update that is deployed via Windows Update/WSUS so reporting against this is easy.

However, Windows 2000 requires updating a few registry keys, and there isn't a real easy way to figure out if you have it installed or not!

Fortunately Open-Audit comes to the rescue.

I put together this code to figure out who has the DST update:

Code:
'****************************************************************************
'Daylight Savings Time update
'****************************************************************************
strKeyPath = "SOFTWARE\Microsoft\Windows NT\CurrentVersion"
strValueName = "ProductName"
oReg.GetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,sOS

strKeyPath = "system\currentcontrolset\control\timezoneinformation"
strValueName = "DaylightStart"
oReg.GetBinaryValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,W2KDST

display_name = "Daylight Savings Time update"

For i = lBound(W2KDST) to uBound(W2KDST)
    sValue = sValue & W2KDST(i)
    'wscript.echo sValue
Next
W2KDST1 = sValue

If W2KDST1 = "0030202000000000" Then
  DSTUpdate = sOS & " DST"
ElseIf W2KDST1 = "00110102000000000" Then
  DSTUpdate = sOS & " DST"
Else
  DSTUpdate = "DST update not installed"
  'DSTUpdate = ""
 
End If

 'If DSTUpdate <> "" then 
    form_input = "software^^^" & display_name       & "^^^" _
                   & DSTUpdate       & "^^^" _
                   & ""                 & "^^^" _
                   & ""                 & "^^^" _
                   & OSInstall          & "^^^" _
                   & "Microsoft Corporation^^^^^^^^^^^^^^^^^^" _
                   & ""                 & "^^^" _
                   & ""                 & "^^^" _
                   & ""   & "^^^ "
    entry form_input,comment,objTextFile,oAdd,oComment
    form_input = ""
 'End If

'****************************************************************************


I pondered whether or not I wanted computers that did not have it installed to report in, but then I thought it would be easier to determine who needed it if I made the version info say 'not installed'. That's why you'll see some commented lines there.

Thought this would help out others...

Rob

_________________
Server Info:
OS : Windows Server 2003
Auditing: ~300 machines
LDAP: Windows Server 2003 Active Directory


Last edited by qc_metal on Sat Mar 03, 2007 2:00 am, edited 1 time in total.

Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Fri Mar 02, 2007 7:52 am 
Offline
Helper

Joined: Tue Jul 25, 2006 2:33 am
Posts: 83
Location: Hampshire, UK
Rob,
This is certainly a feature I can use to make sure nothing has escaped the update process. One question though...for those of us less technically adept..where would I insert this code? :)

Thanks for your efforts!

John


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Fri Mar 02, 2007 8:32 am 
You should be able to just add it to audit_custom_software.inc. If that file is in the same path as audit.vbs, it will executed.


Top
  
Reply with quote  
 Post subject:
PostPosted: Sat Mar 03, 2007 3:43 am 
Offline
Helper

Joined: Tue Jul 25, 2006 2:33 am
Posts: 83
Location: Hampshire, UK
Yes that did it, thanks!


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 4 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group