|
I've had this issue since the mapped drives code was added to audit.vbs. The cause is the "Select Name, Domain from Win32_UserAccount where SID ..." WMI query on line 1946. I suspect that this only evident where you have a large number of domain trusts like I have.
Anyway the fix is to replace lines 1946-152:
[code]
Set colItems = objWMIService.ExecQuery("Select Name, Domain from Win32_UserAccount where SID = '" & subkey & "'",,48)
If colItems <> "" Then
' Found local user
For Each objItem in colItems
MapUserName = objItem.Domain & "\" & objItem.Name
Next
End If
[/code]
With:
[code]Set objItem = objWMIService.Get("Win32_SID.SID='" & subkey & "'")
MapUserName = objItem.ReferencedDomainName & "\" & objItem.AccountName
[/code]
Cheers, Nick.
_________________
Cheers, Nick.
[size=85]OA Server: Windows Server 2003 / Apache 2
Auditing: 1600 Workstations, 200 Servers
OS's: Windows XP / Windows 2000 / Windows 2003 Server / Windows Vista
LDAP: Active Directory[/size]
|
Login
FAQ
Search
