Registrations to Open-AudIT forums are now closed. To ask any new questions please visit Opmantek Community Questions.

Open-AudIT

What's on your network?
It is currently Fri Apr 19, 2024 9:24 am

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 12 posts ] 
Author Message
PostPosted: Wed Dec 17, 2014 4:00 am 
Offline
Contributor

Joined: Thu May 03, 2007 10:38 am
Posts: 116
Location: Midwest
Looks like my windows 8 machines won't pull monitor information like it does with Windows 7.

It is not in summary, hardware, monitor like a Win7 machine.

Which file is this info in and how can we get it added?

THanks


Top
 Profile  
Reply with quote  
PostPosted: Wed Dec 17, 2014 8:47 am 
Offline
Site Admin
User avatar

Joined: Mon Jun 07, 2004 11:48 am
Posts: 1964
Location: Brisbane, Australia
I don't have a physical Win8 machine to test against. If anyone else does, please feel free to hack the code in other\audit_windows.vbs :-)

_________________
Support and Development hours available from [url=https://opmantek.com]Opmantek[/url].
Please consider a purchase to help make Open-AudIT better for everyone.


Top
 Profile  
Reply with quote  
PostPosted: Thu Dec 18, 2014 12:24 am 
Offline
Contributor

Joined: Thu May 03, 2007 10:38 am
Posts: 116
Location: Midwest
Ok so it looks like win8 stores the info in the same key as win7 - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\DISPLAY but for some reason isn't pulling it or maybe writing it.

Remind me where I can look for the data for this win8 machine that was pulled to see if it pulled the monitor information and just didn't write it.


Top
 Profile  
Reply with quote  
PostPosted: Thu Dec 18, 2014 2:27 am 
Offline
Moderator

Joined: Fri Jul 20, 2007 8:27 am
Posts: 1259
[code]cscript audit_windows.vbs -submit_online=n -create_file=y[/code]
Find the <monitors> section in the "[computername]-[date].txt" file that gets created. This is what is audited and submitted.


Top
 Profile  
Reply with quote  
PostPosted: Thu Dec 18, 2014 4:01 am 
Offline
Contributor

Joined: Thu May 03, 2007 10:38 am
Posts: 116
Location: Midwest
Ok I did that and the file isn't pulling anything.

Like I said the reg key entries are the same as windows 7 so trying to figure out why it isn't pulling this info.


Top
 Profile  
Reply with quote  
PostPosted: Thu Dec 18, 2014 5:35 am 
Offline
Contributor

Joined: Wed Apr 07, 2010 8:04 am
Posts: 105
Location: Boston, MA
I can confirm

I have one all-in-one OptiPlex 9010 with Windows 8.1 Enterprise, no monitor info. I have a similar machine with Win7 Enterprise, monitor info is there.

_________________
Old OA Setup: 500 Windows 7 workstations & 200 Apple OSX with OA v1.5.2 on Windows Server 2003 and WAMP 2
New OA Setup: 100 Windows servers with OA 2.2 on Windows Server 2016 and WAMP 3


Top
 Profile  
Reply with quote  
PostPosted: Thu Dec 18, 2014 6:23 am 
Offline
Moderator

Joined: Fri Jul 20, 2007 8:27 am
Posts: 1259
You'll need to debug yourself or post monitor.txt and I'll try to see what the code is doing.[code]reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\DISPLAY /s > c:\monitor.txt[/code]


Top
 Profile  
Reply with quote  
PostPosted: Thu Dec 18, 2014 6:39 am 
Offline
Contributor

Joined: Thu May 03, 2007 10:38 am
Posts: 116
Location: Midwest
Here is the output pulled against that PC.


Attachments:
monitor.txt [10.91 KiB]
Downloaded 325 times
Top
 Profile  
Reply with quote  
PostPosted: Thu Dec 18, 2014 7:09 am 
Offline
Moderator

Joined: Fri Jul 20, 2007 8:27 am
Posts: 1259
The audit code is ignoring entries without a "Control" subkey. I'm guessing as a filter for in-use monitors. From your dump it looks like this key doesn't exist in Win 8.

I don't know how to tell old monitor data from in-use monitor data which is what we want.


Top
 Profile  
Reply with quote  
PostPosted: Thu Dec 18, 2014 7:34 am 
Offline
Contributor

Joined: Thu May 03, 2007 10:38 am
Posts: 116
Location: Midwest
Which Control key?

I see it in the audit_windows.vbs file but not sure which file you mean from the registry.


Top
 Profile  
Reply with quote  
PostPosted: Thu Dec 18, 2014 8:11 am 
Offline
Moderator

Joined: Fri Jul 20, 2007 8:27 am
Posts: 1259
On my Win7 machine audit_windows.vbs writes DEL4024 and DELA07F to the audit file but skips DEL4013 because it does not have a Control key.
[attachment=0] Display.png
Display.png [ 23.34 KiB | Viewed 10927 times ]


Top
 Profile  
Reply with quote  
PostPosted: Fri Dec 19, 2014 1:54 am 
Offline
Contributor

Joined: Wed Apr 07, 2010 8:04 am
Posts: 105
Location: Boston, MA
My Win8.1 doesn't have the Control key either.


Attachments:
monitor.txt [1.34 KiB]
Downloaded 325 times

_________________
Old OA Setup: 500 Windows 7 workstations & 200 Apple OSX with OA v1.5.2 on Windows Server 2003 and WAMP 2
New OA Setup: 100 Windows servers with OA 2.2 on Windows Server 2016 and WAMP 3
Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 12 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group