Registrations to Open-AudIT forums are now closed. To ask any new questions please visit Opmantek Community Questions.

Open-AudIT

What's on your network?
It is currently Thu Apr 18, 2024 6:41 pm

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 10 posts ] 
Author Message
PostPosted: Thu Sep 07, 2006 1:47 am 
Offline
Helper

Joined: Fri Aug 25, 2006 12:59 am
Posts: 75
Location: Northeast Pennsylvania
So, I have everything working what appears to be just fine. I do not understand the auditing process, though. Do I have to work with the PC_List text file to add the systems to audit? I put hfnetchk.exe and the patch file in the scripts folder, put all the pstools exe's in the root web folder (does that mean the root folder of the web server or the open audit directory?), and nmap/winpcap are on my machine.

Now, how does this process actually work? Also, my workstations are Power users, will that cause a problem? I really don't want to make them administrators...

Any help will be appreciated, I'm new to Open-AudIT.

Thanks.


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Thu Sep 07, 2006 3:49 am 
The pstools are not needed, as the audit does not use them. I would suggest moving the scripts out of the website so that no one can access them (especially if you are storing usernames/passwords for machines that might be off the domain. From that point, just configure audit.config to your needs (I'm sure there's some hints on the forum here). Run the audit by typing "cscript audit.vbs" on the command line in the directory in which the scripts are stored.


Top
  
Reply with quote  
 Post subject:
PostPosted: Thu Sep 07, 2006 4:31 am 
Offline
Helper

Joined: Fri Aug 25, 2006 12:59 am
Posts: 75
Location: Northeast Pennsylvania
I got the the command to work, and it does display the "Info" in the command prompt. It took about 30 seconds. It hung on hfnet, so I changed the value to "n" and now it zips through.

Here's a good question, how do I get this information up on the website now that I scanned. Also, Do I have to do this to every machine on the network if I want it to show up in Open-AudIT?


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Thu Sep 07, 2006 7:20 am 
If you are on a domain, set strComputer to "" and then change audit_local_domain to "y". Then enter your domain name in local_domain. This will cause the audit to find every machine on the domain. Also, make sure these lines point to the correct URLs:
ie_form_page = "http://localhost/openaudit/admin_pc_add_1.php"
non_ie_page = "http://localhost/openaudit/admin_pc_add_2.php"

That should do it!


Top
  
Reply with quote  
 Post subject:
PostPosted: Thu Sep 07, 2006 5:50 pm 
Offline
Newbie

Joined: Thu Sep 07, 2006 5:11 pm
Posts: 3
Location: Surabaya
mikeyrb says " If you are on a domain "



does that mean the domain of the web server or domain of computer?

my computer is not member of a domain, but member of a workgroup, can i audit the computer in my workgroup ?

thanks


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Thu Sep 07, 2006 10:59 pm 
Offline
Helper

Joined: Fri Aug 25, 2006 12:59 am
Posts: 75
Location: Northeast Pennsylvania
Thanks mikeyrb. How does one log in as a domain admin?


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Fri Sep 08, 2006 12:27 am 
Offline
Moderator

Joined: Sat Mar 04, 2006 2:44 am
Posts: 193
winarto>
[quote]does that mean the domain of the web server or domain of computer?


Windows domain.

[quote]can i audit the computer in my workgroup ?

I guess you mean: Can I audit all the Computers in my workgroup remotely?

The answer to which is yes:
1. You will need to create a text file containing the computer names and either
a) Run as a user that has remote access rights on the other computers
or b) Supply a username and password for each computer in the text file that has remote access rights to the computer

2. In audit.config have
audit_local_domain = 'n'
input_file = "computer_names_file'

Where computer_names_file is the name of the file you created in step 1)

Generally to create a user with remote access rights you need to make sure that they are a member of the administrators group on the computer. Also remember, administrators with no password cannot remotly access a WinXP computer (unless you've played around with the policy settings).

harner>
[quote] How does one log in as a domain admin?

If you don't know the answer to this I'm guessing you don't have a domain. And if you don't have a domain then you will need to follow the instructions above or run the script on each pc manually.

Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Fri Sep 08, 2006 1:08 am 
Offline
Helper

Joined: Fri Aug 25, 2006 12:59 am
Posts: 75
Location: Northeast Pennsylvania
There is a domain, but I don't know how to control it and the administrator is out today. I'm the new Intern 8)


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Fri Sep 08, 2006 1:32 am 
Offline
Moderator

Joined: Sat Mar 04, 2006 2:44 am
Posts: 193
You'll need passwords so you will have to speak to your domain administrator and tell him what you are trying to do.


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Fri Sep 08, 2006 11:35 pm 
Offline
Newbie

Joined: Fri Sep 08, 2006 11:31 pm
Posts: 2
Location: Jember Raya
i'm try to audit other pc with input computer name, username, password

Username and password provided - therefore assuming NOT a local domain PC.
C:\my webs\oa\scripts\audit.vbs(116, 8) SWbemLocator: Access is denied.

how about that ?


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 10 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group