Registrations to Open-AudIT forums are now closed. To ask any new questions please visit Opmantek Community Questions.

Open-AudIT

What's on your network?
It is currently Fri Mar 29, 2024 4:33 pm

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 32 posts ]  Go to page Previous  1, 2, 3  Next
Author Message
PostPosted: Mon May 26, 2008 8:09 pm 
Offline
Open-AudIT Fellow

Joined: Thu May 17, 2007 5:47 pm
Posts: 568
Location: Italy
Slightly edited the above posted code to avoid useless searching when no mapped drives exist in the user profile

_________________
Edoardo


Top
 Profile  
Reply with quote  
PostPosted: Tue Jun 03, 2008 4:26 pm 
Offline
Open-AudIT Fellow

Joined: Thu May 17, 2007 5:47 pm
Posts: 568
Location: Italy
Hi Andrew, did you have time looking at if that code does what you need?

_________________
Edoardo


Top
 Profile  
Reply with quote  
PostPosted: Wed Jun 04, 2008 12:02 am 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
Sorry, haven't had time (was meant to be on a couple of days holiday, but canceled to assist with a big server move). :?

Will probably have settled down to normal by tomorrow. May have a chance to look soon.

_________________
Andrew

[size=85]OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory[/size]


Top
 Profile  
Reply with quote  
PostPosted: Thu Jun 05, 2008 9:08 am 
Offline
Newbie

Joined: Wed May 21, 2008 2:35 pm
Posts: 9
Hi All, this looks great. I'm keen to implement changes so I can audit users Mapped Drives and Printers.


Top
 Profile  
Reply with quote  
PostPosted: Fri Jun 06, 2008 2:19 am 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
Looks good to me. :lol: Now we need to mod the DB, add a view etc, as per your previous post. Sorry for the slow replies over the last few days, major server upgrade program is filling up my day. :? Should be a lot quieter next week... (maybe).

_________________
Andrew

[size=85]OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory[/size]


Top
 Profile  
Reply with quote  
PostPosted: Fri Jun 06, 2008 7:53 pm 
Offline
Open-AudIT Fellow

Joined: Thu May 17, 2007 5:47 pm
Posts: 568
Location: Italy
Added to SVN rev. 1053 (together with 2 mobo properties). I left there those 3 fields in the mapped table, maybe someone will find a way to fill them too.
Hope it's OK.

_________________
Edoardo


Top
 Profile  
Reply with quote  
PostPosted: Fri Jun 06, 2008 9:13 pm 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
Excellent, I'll give it a whirl.

_________________
Andrew

[size=85]OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory[/size]


Top
 Profile  
Reply with quote  
PostPosted: Fri Jun 06, 2008 9:35 pm 
Offline
Open-AudIT Fellow

Joined: Thu May 17, 2007 5:47 pm
Posts: 568
Location: Italy
Added also an "All mapped drives" view to Queries (SVN 1054).

_________________
Edoardo


Top
 Profile  
Reply with quote  
PostPosted: Fri Jun 06, 2008 10:32 pm 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
Looks good. A few little "funnies" but I will take a look at them later. :lol:

_________________
Andrew

[size=85]OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory[/size]


Top
 Profile  
Reply with quote  
PostPosted: Fri Jun 06, 2008 11:33 pm 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
Works... but, it only reports the drives mapped by the login scripts (so far as I cab tell), and those drives mapped locally when reporting from a server profile.

For example I see Drive Z: from my workstation, (there are about a dozen other drives mapped from my profile on my own box, but these don't show up, drive Z is mapped from my domain login script, the others are mapped manually). It also shows all of the drives mapped from my profile on our departmental 2003 server (Q,T,Z,N,R,V,O,S,W). It also uses a variety of uppercase and lowercase drive letters (q,T,z,n,R,V,o,s,W).

This is not a problem from my point of view, since the idea was to use this information to report what was being offered from the servers (i.e. what is in the login scripts), but it would be nice to also see the drives that the user has mapped manually, and Uppercase the drive letters.

Presumably Windows keeps the other mapped drive info somewhere else?? (Quite why is anybodies guess).

_________________
Andrew

[size=85]OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory[/size]


Top
 Profile  
Reply with quote  
PostPosted: Sat Jun 07, 2008 2:14 am 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
Can we make the drive mapping link back to the list of users drive mappings? In other words, if we click a "Windows Share" > "Windows Share Name" can we have it throw back a list of all users we have discovered using this share?

Likewise, can we click the user's share, and go to the share, path details etc on the machine in question?

_________________
Andrew

[size=85]OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory[/size]


Top
 Profile  
Reply with quote  
PostPosted: Sat Jun 07, 2008 2:48 am 
Offline
Open-AudIT Fellow

Joined: Thu May 17, 2007 5:47 pm
Posts: 568
Location: Italy
As I wrote before, we can only report persistently mapped drives (those enumerated under HKEY_USERS\network): I don't know why other mappings you have for your profile aren't saved to the registry (if they are, it's a bug...).
Regarding uppercase drive letters and links, I will add them in the next few days.

_________________
Edoardo


Top
 Profile  
Reply with quote  
PostPosted: Sat Jun 07, 2008 3:07 am 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
I'll take a look through the registry. I assume it keeps the links for the manually mapped network drives some where else in the registry, but I dont know.
I'll let you know if I discover anything. :D Have a good weekend, speak to you next week sometime.

_________________
Andrew

[size=85]OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory[/size]


Top
 Profile  
Reply with quote  
PostPosted: Sat Jun 07, 2008 9:53 pm 
Offline
Open-AudIT Fellow

Joined: Thu May 17, 2007 5:47 pm
Posts: 568
Location: Italy
Drive letters should be uppercase now, but probably I was too much optimistic for time requested to add those links...
Nice weekend you too.

_________________
Edoardo


Top
 Profile  
Reply with quote  
PostPosted: Wed Jun 25, 2008 5:59 am 
Offline
Newbie
User avatar

Joined: Wed Apr 02, 2008 8:45 am
Posts: 21
I have a script that I have been adding to my logon scripts that generates a txt file for mapped drives. Maybe someone can use it or find a way to add it to open audit.

script text
------------------------------------------------------------------------------------

@echo off
::
:: *** NOTE ***
::
:: ********************************************************************
:: This script should get called by a logon script and if we need to
:: collect information regarding computer environment.
::
::
:: ********************************************************************
::


:: *** COLLECTING CURRENT DRIVE MAPPINGS ***
set DRIVES_FILE=\\networkserver\%username%_%computername%_%random%.txt
echo. >> "%DRIVES_FILE%"
echo =============================================== >> "%DRIVES_FILE%"
echo User Name: %username% >> "%DRIVES_FILE%"
echo Login Script: %1 >> "%DRIVES_FILE%"
echo =============================================== >> "%DRIVES_FILE%"
echo. >> "%DRIVES_FILE%"
echo. >> "%DRIVES_FILE%"
echo ----------------------------------------------- >> "%DRIVES_FILE%"
echo. >> "%DRIVES_FILE%"
echo Logon Time: %DATE% @ %TIME% >> "%DRIVES_FILE%"
echo. >> "%DRIVES_FILE%"
echo ----------------------------------------------- >> "%DRIVES_FILE%"
echo. >> "%DRIVES_FILE%"
net use >> "%DRIVES_FILE%"
echo. >> "%DRIVES_FILE%"
echo ----------------------------------------------- >> "%DRIVES_FILE%"
echo User was authenticated by server %LOGONSERVER% >> "%DRIVES_FILE%"
echo ----------------------------------------------- >> "%DRIVES_FILE%"
echo. >> "%DRIVES_FILE%"
echo. >> "%DRIVES_FILE%"
echo ----------------------------------------------- >> "%DRIVES_FILE%"
echo Home directory path %HOMESHARE% >> "%DRIVES_FILE%"
echo ----------------------------------------------- >> "%DRIVES_FILE%"
echo. >> "%DRIVES_FILE%"
echo ----------------------------------------------- >> "%DRIVES_FILE%"
echo Home directory is mapped to letter %HOMEDRIVE% >> "%DRIVES_FILE%"
echo ----------------------------------------------- >> "%DRIVES_FILE%"
echo. >> "%DRIVES_FILE%"
-------------------------------------------------------------------------------------------------------------------------

_________________
Jon
The Tech Guy
http://www.thetechguyusa.com


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 32 posts ]  Go to page Previous  1, 2, 3  Next

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group