Open-AudIT
https://www.open-audit.org/phpBB3/

System information not being updated...
https://www.open-audit.org/phpBB3/viewtopic.php?f=8&t=5874
Page 3 of 3

Author:  jpa [ Fri Jun 01, 2012 7:17 am ]
Post subject:  Re: System information not being updated...

OK. I've now replicated this. I think you're running the 32-bit version of cscript from c:\Windows\SysWOW64 rather than the 64-bit version from c:\Windows\System32. If you're just calling cscript without any path then your path search order is different than mine. What do you have in your PATH environment variable?

Author:  jpurcell [ Fri Jun 01, 2012 11:43 pm ]
Post subject:  Re: System information not being updated...

[quote="jpa"]OK. I've now replicated this. I think you're running the 32-bit version of cscript from c:\Windows\SysWOW64 rather than the 64-bit version from c:\Windows\System32. If you're just calling cscript without any path then your path search order is different than mine. What do you have in your PATH environment variable?

Well, I just ran it on my system and checked the path using Process Explorer from Sysinternals and it is using the syswow64 path. (this when running the simple command 'cscript.exe audit_windows.vbs')

Interesting stuff.

I just manually specified the system32 path and it does work, pulling the 64bit info as it should, just as you suggested.

Yeesh, is this stuff fun or what? Thanks a bunch for the help. That'll answer that question. Now I'll just specify c:\windows\system32\cscript.exe specifically, as all machines will have it in that path, and it should function correctly for all machines from that path (whether XP, 7, 32-bit, or 64-bit).

Author:  jpa [ Sat Jun 02, 2012 1:37 am ]
Post subject:  Re: System information not being updated...

What you're seeing is not the default behavior which is why we haven't seen this before. Mark could add a check and error out if the script is running under the SysWOW64 32-bit cscript.

Author:  jpurcell [ Sat Jun 02, 2012 3:38 am ]
Post subject:  Re: System information not being updated...

[quote="jpa"]What you're seeing is not the default behavior which is why we haven't seen this before. Mark could add a check and error out if the script is running under the SysWOW64 32-bit cscript.

Not the default behavior of Windows? Is that what you mean?

Author:  jpa [ Sat Jun 02, 2012 4:23 am ]
Post subject:  Re: System information not being updated...

Yes, I don't think 64-bit Windows runs the 32-bit stuff in SysWOW64 by default. I could be wrong.

The audit script could be more robust and handle your situation. Something [url=http://blogs.msdn.com/b/joshpoley/archive/2008/09/18/running-32bit-dependent-scripts-in-a-64bit-world.aspx]like this[/url].

Author:  jpurcell [ Wed Aug 01, 2012 6:50 am ]
Post subject:  Re: System information not being updated...

[quote="Mark"][quote]Hopefully not a stupid question, but would this be done at the audit level, or at the server level?
Never a stupid question. This occurs at the server level (when processing the submitted audit).
The audit script should just retrieve details - no formatting or processing logic should be applied at the script level.

I should've asked a while ago, but where would I make this change?

Thanks!

Author:  jpa [ Wed Aug 01, 2012 8:42 am ]
Post subject:  Re: System information not being updated...

This change would be major work in the "add a system" related components. You'd need to understand how OpenAudit processes the audit data and adds a system to make this change.

Page 3 of 3 All times are UTC + 10 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/