Open-AudIT

What's on your network?
It is currently Wed Jan 24, 2018 7:19 pm

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 6 posts ] 
Author Message
PostPosted: Thu Apr 19, 2007 12:32 am 
Offline
Newbie

Joined: Sun Mar 05, 2006 8:45 am
Posts: 14
We have a number of Windows XP Embedded PCs that have small flsh drives (192M) and limited RAM (256M). I've never been able to get the audit.vbs script to successfully run on these boxes. However, we have upgraded a few to 512M Flash Disk and 512M ram and the audit succeeds. It may be that the larger flash systems have a missing componenet - or it might be that the ram and disk space is needed. Is there any way to find out? I'd really like to audit the small terminals too.


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Thu Apr 19, 2007 2:06 am 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
Can you "manage" them using the manage computer MMC plugin, are they running WMI?

_________________
Andrew

OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Thu Apr 19, 2007 2:23 am 
Offline
Newbie

Joined: Sun Mar 05, 2006 8:45 am
Posts: 14
sort-of. i have a demo unit which I can connect via manage - but can't do anything - permission denied. probably because it's in a domain that doesn't exist. i suspect any machines in production would probably work. i can't test them at this point.


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Tue Apr 24, 2007 12:17 am 
Offline
Newbie

Joined: Sun Mar 05, 2006 8:45 am
Posts: 14
it turns out the base model of these units don't have the MMC installed. could this be causing the issue?


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Tue Apr 24, 2007 12:40 am 
Offline
Newbie

Joined: Sun Mar 05, 2006 8:45 am
Posts: 14
it seems that if i comment out lines 159 & 160 in the audit script then the script runs - but i don't get any results.

here are the two lines:
Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & strComputer & "\root\default:StdRegProv")
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")

I'm guessing this is the heart of the audit. Is there a way to do a 'light' audit? really, i'd just like to get the machine name, IP, and maybe some identifier that tells me the system is a terminal. that would be enough for my purposes at this time.


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Tue Apr 24, 2007 3:53 am 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
NMAP seems the best way to go, run the nmap audit script and your thin boxes will show up under other items >networked items

Hope this helps. :)

_________________
Andrew

OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 6 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group