| Table of Contents |
|---|
Audit a Single Windows Computer
Open-AudIT can audit any Windows computer you have credentials for, access the Open-AudIT main page at http://SERVERNAME-OR-IP/omk/oae, click on "Audit My PC" to download the Windows audit script to your local computer. Then run this script to audit any computer you have credentials for, if logged into a domain you do not need to enter the credentials on the command line.
To get some output while running the script, optionally include debugging=1 at the end of the command.
Audit the Windows Computer you are logged into
| Code Block |
|---|
cscript audit_windows.vbs |
Audit a remote Windows Computer
This will access the Windows computer over the network, gather the necessary information and upload it to the Open-AudIT server.
| Code Block |
|---|
cscript audit_windows.vbs strcomputer=REMOTE_PC strUser=REMOTE_USER strPass=PASSWORD |
More details are available in the article, How to audit a single Windows computer
Run a Network Discovery
Open-AudIT can discover devices on an IP network using network scanning, you can find more details in the article How to audit a subnet using a script
Audit a Windows Domain
Open-AudIT will find all the computers participating in a windows domain and then audit them all, this is detailed in the article, How to audit an Active Directory domain
|
Running into problems? Visit our Troubleshooting page.
Installation and setup.
Installation is easy and there are a few different ways to go about doing it depending on the operating system or VM software you choose to use. Follow the links below that best suite your situation.
Opmantek Virtual Appliance Bundle Installation - Opmantek Virtual Machine: Installation and Getting Started
Windows Installation - Windows - Installing
Linux Installation - Linux - Installing or Upgrading
Using Opmantek Installer - The Opmantek Installer
...
Open-audit and Nmap.
Nmap is required for Open-Audit to run. If not using the Virtual Appliance Bundle (link above) then, below is a link that shows how to install it if needed.
...
Server requirements.
Ensure the server meets the specified requirements.
...
Setup your default configuration items
Open-AudIT Default Configuration Values and Description
Make sure (if you wish to use Discovery), that you have set your values for default_* items.
...
Adjusting Device Matching Rules
When Open-AudIT receives data about a device, either by discovering the device during an audit run or by the user importing the device, it must determine if this discovered device matches a device that already exists within its database, or if it is a new device that should be added. Matching Devices
...
Configuring Your Organizations
Organizations allow you to group devices into Organizations/departments/owners. While you can set this up later, if you are configuring a permanent implementation of Open-AudIT it can be easier to build this out before adding devices.
Organizing your Devices and Users
...
Defining Locations
Leveraging Locations to Speed Up Searching and Display
...
Discover and audit devices.
Building your Network Discovery
Open-AudIT can audit in a variety of network environments. Follow the link below to view a flow chart that assists in deciding what works best for you and your team.
How to Audit in complex network environments
Having trouble getting discovery to work? See: Troubleshooting
...
Creating Roles.
The Roles endpoint allows you to create and manage the set of permissions(Create, Read, Update, Delete).
...
Baselining Devices
For auditing and management purposes it can be advantageous to baseline individual devices against a fixed, know good device. Baselines enable you to combine audit data with a set of attributes you have previously defined (your baseline) to determine compliance of devices. Follow the link below to walk you through setting this up.
Baselining Devices for Consistency and Standardization
...
File/Folder Auditing
For auditing and security purposes it can be advantageous to monitor individual files, or all files in a folder, for changes. Open-AudIT Enterprise has the ability to audit files on both Windows and Linux operating systems.
...
Collector / Server creation.
Collector / Server is designed so that you can have a 'collector' Open-AudIT running on a subnet and discovering devices that is controlled by the 'server'. This feature requires Open-AudIT Enterprise.
...
FAQ.
Troubleshooting
Running into problems? Visit our Troubleshooting page.