DO NOT USEIf you are running v1 or above, please use the audit script that comes in the download.
If you are using a version below v1, please upgrade.
The attached script will not work in v1 and above and is no longer supported.
Am making this a sticky so we can always grab the latest audit script from this thread.
I will keep the attachment to this post updated with the latest.
You will need to rename it from audit_windows.txt to audit_windows.vbs in order to run it (no .vbs attachments allowed).
The first is from the discussions in the Beta5 threads.
I have added some checks for IIS5 so they should audit.
I am not having any luck auditing IIS 5 (or IIS 5.1) on WinXP. Win2k seems fine.
I have changed the "last logged on user" section to specifically audit one way or the other depending on the Windows version.
I have added a couple of variables to check for a users Active Directory work unit. If #1 produces no result, it tries #2. Leave these blank if you dont want anything returned.
I have added a flag to not audit software - this is useful in testing so you can quickly skip the software if you don't need it.
skip_software = "y" will
not audit installed software.
skip_dns = "y" will
not attempt to resolve DNS for static IP Addresses.
All attributes are able to be set via the command line.
Not all attributes are set for production.
[s]It is set to create a file and not submit online.[/s]
Debugging is set to 2 (very verbose).
Software is audited - you may wish to disable for faster script running when testing.Current as at 2012-04-27 (v1) is attached.
New script uploaded (v2) as at 2012-05-09. Fixed Win2k Keys and Win2k network section.
EDIT - v2 re-uploaded.
New script uploaded (v3) as at 2012-05-21. Added DNS entries for any systems with a static IP (think servers).
New script uploaded (v4) as at 2012-06-04. Accounts for Windows 8 in the os_family section.
New script uploaded (v5) as at 2012-06-04. Error checking if no AD user returned.
New script uploaded (v6) as at 2012-06-04. Fixed broken v4 / v5.
![Embarassed :oops:](./images/smilies/icon_redface.gif)
New script uploaded (v7) as at 2012-06-16. Have been trying to detect SQL better. Should show version, edition and enumerate DBs in all instances as well as SQL Express. Please try this and post if it doesn't work for you.
New script uploaded (v7_1) as at 2012-06-18. A couple of SQL Express fixes. NOTE - if SQL Express does not have it's databases listed when runnig the script remotely, try copying the script to the machine in question and running it locally. I am getting mixed results, but it should always work locally. I think you have to explicitly enable network logons when configuring SQL Express - not sure... Running it locally should work though.
New script uploaded (v7_2).
New script uploaded (v8) as at 2012-06-26. Heaps of fixes for printers. Should only detect actual printers that exist. Network printers are pinged. USB printers are detected. Software printers are excluded. DOT4 (mainly HP) printers cannot be detected, so are assumed to exist (same for LPT1). Duplex and colour abilities are detected. Debugging is set to 2 (very verbose), will submit online, will not create a file.
New script uploaded (v8_1) as at 2012-06-27. More printer fixes.
New script uploaded (v9) as at 2012-07-18. This is the script from beta6.
New script uploaded (v10). Extra software retrieved (32bit) when auditing a 64 bit system. Thanks dhawkshaw.
New script uploaded (v11) as at 2012-09-15. Option to ping before attempt to audit. Fixed Win32_USBDevice in printers section.
New script uploaded (v12) as at 2012-10-03. Added "create file" ability when a system is offline and details taken from AD. Increased the number of allowable IP addresses on a system from 20 to 100. Increased submit webpage processing timeout. Edited the "windows user name" functionality to prevent errors.
New script uploaded (v13) as at 2013-02-26. Make sure you grab the sqlite.exe from [url=http://www.open-audit.org/phpBB3/viewtopic.php?f=20&t=5993]here[/url] to detect Adobe keys. This is optional and it will work fine without it. Changes - filter for Dameware in video detection, improved monitor detection and cleanup, turned down the verboseness when debugging in the Printer section (increase debugging variable to get it back), ensure there is NO output when debugging set to 0, added ODBC driver for 64 bit Windows, removed "software uninstall" variable (not used server side anyway) because it was causing problems, added WIn8 and Win2012 where detection needed it, added extra software detection when audit is run using double click or from the web interface on 64bit Windows, added extra debugging output for Windows keys, added Adobe key detection using sqlite3 (as above), added TeamViewer key detection, revised the "escape_xml" function - now using CDATA where needed, added SKUs for Office 2013, revised "getkey_rpk" function, added some windows build number in the comments at the very end of the script. Phew
![Smile :-)](./images/smilies/icon_smile.gif)
I plan to ship this with the next release. Make sure you are using the latest beta with this script.
New script uploaded (v14) as at 2013-02-27. Incorporated JPAs changes (as per post in this thread). Thanks JPA!. Office 2013 and Win8 key detecton. Added comments that debugging can be set to "3" - very verbose.
New script uploaded (v15) as at 2013-02-27. Added on ability to continue and not error if domain cannot be contacted. Think running the audit on a laptop not connected to the internal network, hence cannot see a domain controller.
New script uploaded (v16). Fixed JPAs bug
![Laughing :lol:](./images/smilies/icon_lol.gif)
New script uploaded (v17) as at 2013-03-06. Fixed my bug that should have fixed JPAs bug
![Embarassed :oops:](./images/smilies/icon_redface.gif)
New script uploaded (v18) as at 2013-03-06. Fixed Bugs found by Franck. Thanks Franck.