Open-AudIT

Hi,

I am trying to audit my domain but I haven't had any success so far. I was able to audit my local machine without any problems. Below is my audit.config file settings:

audit_location = "l"
verbose = "y"
online = "yesxml"
strComputer = ""
ie_visible = "n"
ie_auto_submit = "y"
ie_submit_verbose = "y"
ie_form_page = "http://localhost.gc.local/openaudit/admin_pc_add_1.php"
non_ie_page = "http://localhost.gc.local/openaudit/admin_pc_add_2.php"
nmap_subnet = "192.168.2.0." ' The subnet you wish to scan
nmap_subnet_formatted = "192.168.2.1." ' The subnet padded with 0's
nmap_ie_form_page = "http://localhost.gc.local/openaudit/admin_nmap_input.php"
nmap_ie_visible = "n"
nmap_ie_auto_close = "y"
nmap_ip_start = 1
nmap_ip_end = 254
input_file = ""
email_to = ""
email_from = ""
email_server = ""
audit_local_domain = "y"
local_domain ="LDAP://gc.local"
hfnet = "n"
Count = 0
number_of_audits = 20
script_name = "audit.vbs"
monitor_detect = "y"
printer_detect = "y"
software_audit = "y"
uuid_type = "mac"

When I run the audit.vbs script, I get an error (151,3) Provider: Table does not exist

What's happening?

Thanks,


Mike

What happens if you set audit_local_domain = "n" and strComputer="someothercomputer" (fill in a name there)?

That works only on my machine. I am also not sure what to put here:

ie_form_page = "http://localhost/openaudit/admin_pc_add_1.php"
non_ie_page = "http://localhost/openaudit/admin_pc_add_2.php"
nmap_subnet = "192.168.2.0." ' The subnet you wish to scan
nmap_subnet_formatted = "192.168.2.0." ' The subnet padded with 0's
nmap_ie_form_page = "http://localhost/openaudit/admin_nmap_input.php"

and here:

local_domain ="LDAP://DC=****,DC=local"


Mike

Are you currently logged in as a user that as administrator access on the domain level? If you only have local admin privileges than that is why it is not working. The nmap settings do not need to be in the audit.config, as the audit.vbs does not do nmap (separate file for nmap). The form pages just need to point to a url accessible by the machine that is running the audit (and those pages, of course). local_domain can be of the form "name.local" or "dc=name,dc=local" it doesn't matter.

I am not an Enterprise Admin, but I do have domain admin rights ( add, remove workstations, reset passwords). Are these rights sufficient? I can connect to WMI on remote PCs.

Mike

Are you running the SVN version or the downloaded zip from sourceforge?

I am using the SVN version...I am running setup.php from the trunk folder. Also, I forgot to mention that each time I run the script I see the following: no username and password provided,therefore assuming local domain PC.

Mike

What is your windows domain name?

GC.NC

Then that is what must go in your local_domain line, so:

local_domain ="LDAP://GC.NC"

If that doesn't work,

local_domain ="LDAP://DC=GC,DC=NC"

The LDAP settings were wrong...it's working like a charm!

Thanks for your help, and thank you for Open Audit.

Mike