RE: Microsoft Software Auditing ?

["warcat" <warcat () military-sf com>]

My personal favorite is Winaudit.  http://www.pxserver.com/WinAudit.htm
which does everything you've described.  It is a small, single file that is
easily scripted.  Depending on the script you can e-mail it, dump it into a
csv file, dump it into a database (SQL, MySQL, PostGrep, etc).  It does HTML
and works on Windows 95 and up.

I've managed it several ways (I work for a consulting company).  Via script
where it dumps things into a csv file.  I compile them and import into a
custom Access database for my reports, or I dump them into a MySQL database
where I can use the same Access DB to run reports.  MySQL is easiest because
the ODBC connection is just a registry key you can import, and rolling out
MyODBC is pretty easy.  Haven't figured out how to do a installable SQL ODBC
(mostly because MySQL is so much easier, and more readily available.)

It collects a large amount of information from BIOS to License keys, service
pack levels, patches, logged on user, dll's etc.  You can script it so it
just pulls certain items (it can take a while to catalogue all dll's).

Extremely versatile.

I can't say it is perfect but it pulls back a very large amount of
information.  The hard part is creating reports to get what you want.
(Which can be child's play in Access or Fox Pro).

If you need help with it let me know.

Sorry about the long post.  I troll a lot but when I have something to say,
I say a lot of it.

Good luck and Thank you.

-Bill

-----Original Message-----
From: Michael Gale [mailto:michael.gale () bluesuperman com] 
Sent: Friday, April 01, 2005 10:36 PM
To: security-basics () securityfocus com
Subject: Microsoft Software Auditing ?

Hello,

        Does any body know of any free / cheap Microsoft auditing software ?

Ideally I would like something that could be run from a login script, that
would find all the software currently installed and either:

store it in a network drive (excel, html,txt) e-mail the data

I do not want to have to take out a loan to buy this software.

preferably open source :)

Michael

---------------------------------------------------------------------------
Earn your MS in Information Security ONLINE Organizations worldwide are in
need of highly qualified information security professionals.  Norwich
University is fulfilling this demand with its MS in Information Security
offered online.  Recognized by the NSA as an academically excellent program,
NU offers you the opportunity to earn your degree without disrupting your
home or work life.

http://www.msia.norwich.edu/secfocus_en
----------------------------------------------------------------------------





---------------------------------------------------------------------------
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information security 
professionals.  Norwich University is fulfilling this demand with its MS in 
Information Security offered online.  Recognized by the NSA as an 
academically excellent program, NU offers you the opportunity to earn your 
degree without disrupting your home or work life.

http://www.msia.norwich.edu/secfocus_en
----------------------------------------------------------------------------