9 Replies Latest reply: Jun 13, 2012 2:51 PM by Cris Coffey RSS

    Auditing VPN connected users

    Teddy Anderson

      I intend to write a script to audit remote users when they are connected via VPN, but am unsure what command to execute.  When I try to execute audit.exe from the Track-It share while logged on to a remote (or even local) machine, all I get is a quick pop-up screen, and no XML audit file is written.

       

      Can someone give me the exact syntax required to manually audit a PC?

       

      Thanks.

        • 1. Re: Auditing VPN connected users
          Cris Coffey

          That’s all you need. Audit.exe will scan the machine.

           

          It’s possible you have already audited the machine you are testing with that day and may have the audit set to run once per day.

           

          That or you do not have write permissions to the Track-It! share and the data directory below it.

          • 2. Auditing VPN connected users
            Teddy Anderson

            I guess I'm doing something wrong, then.  I'm working from a test machine, that has been previously audited.  I deleted the asset in Track-It, then deleted the TrackiAudit.id file from the test machine.  Then, from the test machine, I browsed to the Track-It share, and executed audit.exe.  Again, a quick pop up, but no XML file written to the data directory on the share.  I checked permissions on the share (both NTFS and sharing), then browsed to the data directory and created and saved a file.

             

            Just to be sure, I then went to the client and selected Merge, but the audmerge.log is showing Merged: 0  Skipped: 0  Failed: 0 

             

            So, at the end of the day, the XML results file isn't getting written.  As a note, I can discover and audit this same machine fine using the console.

             

            Thanks for any help.

            • 3. Re: Auditing VPN connected users
              Cris Coffey

              That is really strange. Are all the days of the week turned off in the scheduling tab in the Admin Console?

              • 4. Auditing VPN connected users
                Teddy Anderson

                Yes, it's not even scheduled.  After I execute audit.exe from the test machine, the trackitaudit.id file is recreated.

                 

                I will note that I am able to copy the executable (audit.exe) to the test machine, and run through the wizard manually, and it works. 

                 

                I've tried it from several machines (delete trackitaudit.id, delete asset from database, and then run audit.exe), but none have successfully created XML files.  Again, I can audit all of them from the console, as well as copying the executable and manually running the wizard.

                 

                Help?

                 

                Thanks,

                • 5. Re: Auditing VPN connected users
                  Cris Coffey

                  Turn on all those days of the week. It sounds like you have it restricted to never run if all the days are off.

                  • 6. Auditing VPN connected users
                    Teddy Anderson

                    I guess I'm dense.  Does the scheduling have anything to do with running a manual, scripted audit on a machine?  My goal is to write a script that will be executed when my users connect to my network via a VPN.  I can get a test script to execute when they connect, but when the script contains a line that executes \\trackit-share\audit.exe, no XML file gets generated.

                    • 7. Re: Auditing VPN connected users
                      Cris Coffey

                      If memory serves, there are two tabs with days on them. I will have to bring up a copy of Track-It! to check which one is which but one is for scheduling and one is for just allowing the audit to be run. You have to turn on the days of the week on the one that allows the audit to be run.

                      • 8. Auditing VPN connected users
                        Teddy Anderson

                        Wow.  I had no idea.  That worked perfectly!  Thank you, Chris!

                        • 9. Auditing VPN connected users
                          Cris Coffey

                          No problem.