Registrations to Open-AudIT forums are now closed. To ask any new questions please visit Opmantek Community Questions.

Open-AudIT

What's on your network?
It is currently Fri Apr 19, 2024 1:00 pm

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 6 posts ] 
Author Message
PostPosted: Wed Oct 14, 2009 12:41 am 
Offline
Newbie

Joined: Fri Feb 08, 2008 8:05 pm
Posts: 25
I have 25 PCs with Windows XP and Kaspersky 6 Antivirus and that they appear correctly in the report. But I have 8 PCs with Vista and that is not listed in the report. This is a bug?


Top
 Profile  
Reply with quote  
 Post subject: Re: Antivirus and Vista
PostPosted: Wed Oct 14, 2009 6:11 pm 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
So far I have managed to avoid the Windows Vista route, so I can't check for this issue. :cry:

_________________
Andrew

[size=85]OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory[/size]


Top
 Profile  
Reply with quote  
 Post subject: Re: Antivirus and Vista
PostPosted: Wed Oct 14, 2009 7:21 pm 
Offline
Contributor

Joined: Fri Jul 28, 2006 6:30 am
Posts: 157
Location: London
I suspect that AV status info is stored in WMI "\root\SecurityCenter2" in Vista, not "\root\SecurityCenter".

_________________
Cheers, Nick.

[size=85]OA Server: Windows Server 2003 / Apache 2
Auditing: 1600 Workstations, 200 Servers
OS's: Windows XP / Windows 2000 / Windows 2003 Server / Windows Vista
LDAP: Active Directory[/size]


Top
 Profile  
Reply with quote  
 Post subject: Re: Antivirus and Vista
PostPosted: Thu Oct 15, 2009 9:44 pm 
Offline
Open-AudIT Fellow

Joined: Thu May 17, 2007 5:47 pm
Posts: 568
Location: Italy
It seems that \root\SecurityCenter stores those info for Vista. We retrieve antivirus and firewall settings from Vista only if SystemBuildNumber = "6000", but (I wasn't aware of this) Vista SP2 changed build number to 6002 and (probably) Vista SP1 build number was 6001.
Should we go checking for Win32_OperatingSystem.Caption instead, if it contains "Vista"?

_________________
Edoardo


Top
 Profile  
Reply with quote  
 Post subject: Re: Antivirus and Vista
PostPosted: Fri Oct 16, 2009 1:02 am 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
[quote="ef"]It seems that \root\SecurityCenter stores those info for Vista. The problem is in audit.vbs: we retrieve antivirus and firewall settings from Vista only if SystemBuildNumber = "6000", but (I wasn't aware of this) Vista SP2 changed build number to 6002 and (probably) Vista SP1 build number was 6001.
Should we go checking for Win32_OperatingSystem.Caption instead, if it contains "Vista"?


Or we can check for 6000-6009 I doubt if MS will produce more than 9 service packs, since Vista is effectively a dead duck, with Windows 7 on the close horizon.

_________________
Andrew

[size=85]OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory[/size]


Top
 Profile  
Reply with quote  
 Post subject: Re: Antivirus and Vista
PostPosted: Fri Oct 16, 2009 6:47 pm 
Offline
Open-AudIT Fellow

Joined: Thu May 17, 2007 5:47 pm
Posts: 568
Location: Italy
Fixed at SVN rev. 1203. Should be OK for Windows Server 2008 and Seven too.

_________________
Edoardo


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 6 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group