| Table of Contents |
|---|
Audit a Single Windows Computer
Getting Started
Why not try auditing a single Windows PC first? To do this, go to Open-AudIT can audit any Windows computer you have credentials for, access the Open-AudIT main logon page at at http://SERVERNAMEYOUR-OR-IPSERVER/omk/oae, click on (but do not log in) using Internet Explorer on a Windows PC. You should see a page as below. Click the "Audit My PC" to download the Windows audit script to your local computer. Then run this script to audit any computer you have credentials for, if logged into a domain you do not need to enter the credentials on the command line.
To get some output while running the script, optionally include debugging=1 at the end of the command.
Audit the Windows Computer you are logged into
| Code Block |
|---|
cscript audit_windows.vbs |
Audit a remote Windows Computer
This will access the Windows computer over the network, gather the necessary information and upload it button and run the script. You should see your computer being audited and the data should be posted to the Open-AudIT server.
| Code Block |
|---|
cscript audit_windows.vbs strcomputer=REMOTE_PC strUser=REMOTE_USER strPass=PASSWORD |
More details are available in the article, How to audit a single Windows computer
Run a Network Discovery
Open-AudIT can discover devices on an IP network using network scanning, you can find more details in the article How to audit a subnet using a script
Audit a Windows Domain
You should now be able to log in and see the details from your Windows PC.
Once you have confirmed this is working, why not try discovering a subnet or your active directory domain.
Open-AudIT will find all the computers participating in a windows domain and then audit them all, this is detailed in the article, How to audit an Active Directory domain