Open-AudIT

What's on your network?
It is currently Sun Jan 21, 2018 1:07 pm

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 3 posts ] 
Author Message
PostPosted: Tue Dec 02, 2008 10:44 pm 
Offline
Newbie

Joined: Sat Nov 29, 2008 4:11 am
Posts: 2
Good morning

Anyone can help me please.

I need to know if is possible run the audit.vbs in windows desktops, when the user is not a local Administrator.

When i try, see Acess Denied error.

Tks,


Top
 Profile  
Reply with quote  
PostPosted: Wed Dec 03, 2008 4:03 am 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
Unless the user has access to WMI, which presumably this user does not, then, no, they cannot audit the machine. You could set permissions on WMI for certain users and groups, with a Group or Local Policy, or directly through the Manage Computer >WMI GUI.

_________________
Andrew

OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory


Top
 Profile  
Reply with quote  
PostPosted: Fri Apr 24, 2009 4:33 am 
Offline
Newbie

Joined: Fri Apr 24, 2009 4:10 am
Posts: 3
Location: Southern California
We are running audit.vbs by editing Group Policy for our Windows domain. From Group Policy you can force your domain users to run different scripts
Startup & Shutdown scripts -- applied to domain computers with effective administrative rights
Logon and Logoff scripts -- these are done with user rights when a user logs in or logs off

We use Startup scripts. Whenever someone starts their computer, we audit it. Pretty slick.

Since an complete scan of a computer can take a few minutes, I'm trying out a strategy where I add a QuickScan variable inside the script. If QuickScan = True, only software scan is done. All the hardware stuff is skipped. If it happens to be Monday, I set QuickScan = False, and a full scan is done. I don't really think I need to do it every week, but I couldn't figure out how to do the date manipulation to find the first Monday of the month.

I also run the firewall_enable.vbs script, with an added line at the beginning:
Code:
 On Error Resume Next

There is probably a more elegant way to do this, but I haven't figured it out yet. The second time a client computer runs the firewall_enable script, some errors are generated, presumably because the registry keys already exist. So I just tell VbScript to ignore the errors.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 3 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group