Open-AudIT

Succes!

Next objective: Audit my IP-RANGE using audit_list.vbs
I'll start a new thread if I experience problems.

If you supply a list into audit_list, all it does is enumerate that list and call audit_windows.
If you need to supply credentials, make sure your list looks like -

It should "just work"...
NOTE - COMPUTERNAME should be a name or IP Address - shouldn't matter.

_________________
Support and Development hours available from Opmantek.
Please consider a purchase to help make Open-AudIT better for everyone.

This is because you're passing wbemFlagReturnWhenComplete (16 of the 48) to the ExecQuery.
If you change the 48 to 32 your stuff should work. This will mean that the call doesn't return until the query is complete which will slow down the processing a bit. With the 48 in there I think you can be working through the early colItems while the query is still processing the later ones.

Potential upgrades to audit_list.vbs:

• Pull the computer list from a file like in OAv1
• Allow audit_run_type = "remote" to pass the individual computer strUser and strPass to psexec rather than the remote_user and remote_password. The remote_* stuff doesn't work unless all the target computers have the remote_user defined with the same remote_password

Well that's interesting. I replaced all the 48s with 32s. I then ran both versions of the script locally on my desktop. The 32 script was faster. I then ran it on a remote system - the 32 script was still faster... I'll leave it that way for now (a simple search/replace is all that's needed to change it back).



Can do - will spend some time on it.



Shouldn't be difficult to fix that.

_________________
Support and Development hours available from Opmantek.
Please consider a purchase to help make Open-AudIT better for everyone.

That's nice. I guess I should have said "may" slow it down. The documentation suggests wbemFlagReturnWhenComplete (0) [Synchronous Mode] may cause problems when you're querying large data sets. You're supposed to use wbemFlagReturnImmediately (16) [Semisynchronous Mode] + wbemFlagForwardOnly (32) to mitigate this but I guess the overhead slows it down. So if you're going to query thousands of event log entries you should use 48. Otherwise 32 should be okay unless you need to iterate over the return object multiple times like in the software installed_by stuff.

It does!

I edited audit_list.vbs
This is what I was looking for. An (very) affordable audit program for use in the schools I work in.
Your efforts are greatly appreciated.

I'll keep watching the board.
w.