Open-AudIT
https://www.open-audit.org/phpBB3/

list_all_win_admins: filter defaults
https://www.open-audit.org/phpBB3/viewtopic.php?f=9&t=3234		 Page 1 of 1
Author:  Walter1981 [ Fri Mar 27, 2009 5:37 pm ]
Post subject:  list_all_win_admins: filter defaults
another feature I'd like: the list-all-windows-administrators also lists the defaults "administrator, domain admins". I'd like to add a filter to filter these out so in the results you only find the hosts with other local admins.

I won't mind doing this myself, but before I start coding: are there any guidelines I should follow? I would do it like this:

in the admin_config.php script add another option: "default local admin filter:" with default value "Administrator, Domain Admins" (this must be an option since local administrator may be renamed (as we do) and you could have other default admins too).

in the list-script add a text-field "don't list: " to the top with the filter in by default. In the script the filter is added to the query (duh)
Author:  A_Hull [ Fri Mar 27, 2009 9:24 pm ]
Post subject:  Re: list_all_win_admins: filter defaults
Sounds good to me, let me know if you need any help testing etc.
:D
Author:  Snoop [ Tue May 12, 2009 5:23 pm ]
Post subject:  Re: list_all_win_admins: filter defaults
Yes!!! - I'm here for testing to, I was actualy wondering about something like this, great job!


Thanks & Regards,
Adrian
Author:  Snoop [ Thu Nov 05, 2009 7:39 pm ]
Post subject:  Re: list_all_win_admins: filter defaults
anybody tackled this in the end?
Author:  ibiza [ Fri Mar 11, 2011 1:51 am ]
Post subject:  Re: list_all_win_admins: filter defaults
It's simple.

Modify the SQL query in the file list_viewdef_all_win_admins.php

Original Line 4:
[code]
"sql"=>"SELECT * FROM groups, system WHERE groups_SID = 'S-1-5-32-544' AND groups_uuid = system_uuid AND groups_timestamp = system_timestamp",
[/code]

Modified:
[code]
"sql"=>"SELECT * FROM groups, system WHERE groups_SID = 'S-1-5-32-544' AND groups_uuid = system_uuid AND groups_timestamp = system_timestamp AND NOT groups_members = \"Add here the output from a standard machine\" ",
[/code]
Page 1 of 1 All times are UTC + 10 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/