Registrations to Open-AudIT forums are now closed. To ask any new questions please visit Opmantek Community Questions.

Open-AudIT

What's on your network?
It is currently Fri Mar 29, 2024 3:15 am

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 4 posts ] 
Author Message
PostPosted: Thu Mar 01, 2007 8:29 am 
Offline
Helper

Joined: Sat Sep 17, 2005 7:15 am
Posts: 71
Windows XP, 2003, etc. have an actual update that is deployed via Windows Update/WSUS so reporting against this is easy.

However, Windows 2000 requires updating a few registry keys, and there isn't a real easy way to figure out if you have it installed or not!

Fortunately Open-Audit comes to the rescue.

I put together this code to figure out who has the DST update:

[code]
'****************************************************************************
'Daylight Savings Time update
'****************************************************************************
strKeyPath = "SOFTWARE\Microsoft\Windows NT\CurrentVersion"
strValueName = "ProductName"
oReg.GetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,sOS

strKeyPath = "system\currentcontrolset\control\timezoneinformation"
strValueName = "DaylightStart"
oReg.GetBinaryValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,W2KDST

display_name = "Daylight Savings Time update"

For i = lBound(W2KDST) to uBound(W2KDST)
sValue = sValue & W2KDST(i)
'wscript.echo sValue
Next
W2KDST1 = sValue

If W2KDST1 = "0030202000000000" Then
DSTUpdate = sOS & " DST"
ElseIf W2KDST1 = "00110102000000000" Then
DSTUpdate = sOS & " DST"
Else
DSTUpdate = "DST update not installed"
'DSTUpdate = ""

End If

'If DSTUpdate <> "" then
form_input = "software^^^" & display_name & "^^^" _
& DSTUpdate & "^^^" _
& "" & "^^^" _
& "" & "^^^" _
& OSInstall & "^^^" _
& "Microsoft Corporation^^^^^^^^^^^^^^^^^^" _
& "" & "^^^" _
& "" & "^^^" _
& "" & "^^^ "
entry form_input,comment,objTextFile,oAdd,oComment
form_input = ""
'End If

'****************************************************************************
[/code]

I pondered whether or not I wanted computers that did not have it installed to report in, but then I thought it would be easier to determine who needed it if I made the version info say 'not installed'. That's why you'll see some commented lines there.

Thought this would help out others...

Rob

_________________
Server Info:
OS : Windows Server 2003
Auditing: ~300 machines
LDAP: Windows Server 2003 Active Directory


Last edited by qc_metal on Sat Mar 03, 2007 2:00 am, edited 1 time in total.

Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Fri Mar 02, 2007 7:52 am 
Offline
Helper

Joined: Tue Jul 25, 2006 2:33 am
Posts: 83
Location: Hampshire, UK
Rob,
This is certainly a feature I can use to make sure nothing has escaped the update process. One question though...for those of us less technically adept..where would I insert this code? :)

Thanks for your efforts!

John


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Fri Mar 02, 2007 8:32 am 
You should be able to just add it to audit_custom_software.inc. If that file is in the same path as audit.vbs, it will executed.


Top
  
Reply with quote  
 Post subject:
PostPosted: Sat Mar 03, 2007 3:43 am 
Offline
Helper

Joined: Tue Jul 25, 2006 2:33 am
Posts: 83
Location: Hampshire, UK
Yes that did it, thanks!


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 4 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group