[quote="ef"]Regarding SVN revision of audit.vbs, both Partitions (boot flags) and Mapped drives (for ALL local users) info require admin rights, even for local audits. I didn't try regarding Scheduled tasks and IIS info.
Quite correct, not sure why the boot flags require admin rights, but anything which allows one user to see the settings of another will require extended rights. This probably does include Scheduled tasks and IIS but I haven't proved this for certain. Most of the rest of the info is available to any local user, so long as local policy or rights do not specifically exclude this (default policy/rights should allow).
Bear in mind that if you run a domain audit as a domain admin, you will see all of the info for all of the machines.
_________________ Andrew
[size=85]OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home) LDAP: Active Directory[/size]
|