Re: Microsoft Software Auditing ?

[Andrew Rogers <andrew.rogers () optusnet com au>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am a fan of remote system information by digital labs.
http://www.digitallabs.net

scans via Ip range, active dir...

Comes with built in things that it can scan for - or you can add your
own (program paths, registry values etc.) will also scan some WMI stuff
such as asset tag number etc..

You can then export it all into xls or htm..

Very easy. Comes with a 15 day trial and different licence options
should you wish to continue using it.

On a secondary note, Does anyone know of a user permissions/groups
auditing tool? I need to be able to be able to query both AD and local
machines..

andrew

Beauford, Jason wrote:
| I like pstools from www.sysinternals.com
|
| Psinfo -s >> \\<SERVER>\<SHARE>\<filename>.txt
|
| Want to know about hotfixes?
|
| Psinfo -h >> blah..blah..blah..
|
| Of course it only works on W2K and Up.
|
| OR
|
| If you only care about MS Products installed on MS machines use the MS
| Software Inventory Analyzer:
| http://www.microsoft.com/resources/sam/msia.mspx
|
|
| -jmb
|
| -----Original Message-----
| From: Charles Otstot [mailto:charles.otstot () ncmail net]
| Sent: Tuesday, April 05, 2005 1:10 PM
| To: security-basics () securityfocus com
| Subject: RE: Microsoft Software Auditing ?
|
|
|
|
| -----Original Message-----
| From: Robert Holtz [mailto:robert.d.holtz () gmail com]
| Sent: Tuesday, April 05, 2005 9:24 AM
| To: Michael Gale
| Cc: security-basics () securityfocus com
| Subject: Re: Microsoft Software Auditing ?
|
| You could do something as simple as:
|
| dir *.exe /s > foo.all.of.the.exe.files.txt
|
|
| Assuming the box to be audited is a Windows system, this might not be a
| simple task as the output on any given box would encompass several
| hundred .exe's for OS files. This obviously doesn't include any
| executables for end-user applications or other sources. The time to
| script paring down the output and gathering any useful information would
| probably be rather lengthy as one would have to identify whether xyz.exe
| belongs to the OS, a vendor's OS build (if OEM), etc. Then once you get
| rid of all the fluff that belongs on every box, you'll have to repeat
| the same for each box audited to identify each of the executable files
| and their sources, a potentially daunting task depending upon the number
| of boxes, the number of different hardware configurations and the
| complexity of installed applications.
|
|
|
| On Apr 1, 2005 10:36 PM, Michael Gale <michael.gale () bluesuperman com>
| wrote:
|
|>Hello,
|>
|>       Does any body know of any free / cheap Microsoft auditing
|>software
|
| ?
|
|>Ideally I would like something that could be run from a login script,
|>that would find all the software currently installed and either:
|>
|>store it in a network drive (excel, html,txt)
|>e-mail the data
|>
|>I do not want to have to take out a loan to buy this software.
|>
|>preferably open source :)
|>
|>Michael
|>
|>
|
| ------------------------------------------------------------------------
| ---
|
|>Earn your MS in Information Security ONLINE
|>Organizations worldwide are in need of highly qualified information
|
| security
|
|>professionals.  Norwich University is fulfilling this demand with its
|>MS
|
| in
|
|>Information Security offered online.  Recognized by the NSA as an
|>academically excellent program, NU offers you the opportunity to earn
|>your degree without disrupting your home or work life.
|>
|>http://www.msia.norwich.edu/secfocus_en
|>
|
| ------------------------------------------------------------------------
| ----
|
|>
|
| ------------------------------------------------------------------------
| ---
| Earn your MS in Information Security ONLINE
| Organizations worldwide are in need of highly qualified information
| security
|
| professionals.  Norwich University is fulfilling this demand with its MS
| in
| Information Security offered online.  Recognized by the NSA as an
| academically excellent program, NU offers you the opportunity to earn
| your
| degree without disrupting your home or work life.
|
| http://www.msia.norwich.edu/secfocus_en
| ------------------------------------------------------------------------
| ----
|
|
|
|
| ------------------------------------------------------------------------
| ---
| Earn your MS in Information Security ONLINE
| Organizations worldwide are in need of highly qualified information
| security
| professionals.  Norwich University is fulfilling this demand with its MS
| in
| Information Security offered online.  Recognized by the NSA as an
| academically excellent program, NU offers you the opportunity to earn
| your
| degree without disrupting your home or work life.
|
| http://www.msia.norwich.edu/secfocus_en
| ------------------------------------------------------------------------
| ----
|
|
|
- 
---------------------------------------------------------------------------
| Earn your MS in Information Security ONLINE
| Organizations worldwide are in need of highly qualified information
security
| professionals.  Norwich University is fulfilling this demand with its
MS in
| Information Security offered online.  Recognized by the NSA as an
| academically excellent program, NU offers you the opportunity to earn
your
| degree without disrupting your home or work life.
|
| http://www.msia.norwich.edu/secfocus_en
|
- 
----------------------------------------------------------------------------
|
|
|
|
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCVJKyHrvPMNIBbzMRAmJsAJ0VwKfk+LtA6vglSwfmvOXPnHaA6QCeMmtX
c9HNe/PCa4llWIXHFCjWjq8=
=LQ0N
-----END PGP SIGNATURE-----


---------------------------------------------------------------------------
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information security 
professionals.  Norwich University is fulfilling this demand with its MS in 
Information Security offered online.  Recognized by the NSA as an 
academically excellent program, NU offers you the opportunity to earn your 
degree without disrupting your home or work life.

http://www.msia.norwich.edu/secfocus_en
----------------------------------------------------------------------------