AuditWizard - Using AuditWizard - Administration - Auditing - AuditScanner Configuration

From Layton Support
(Difference between revisions)
Jump to: navigation, search
(Alert Monitor Settings)
m (Minor formatting changes)
 
(25 intermediate revisions by one user not shown)
Line 1: Line 1:
<p align="right">[[File:btn_back_up.png|link=User Guide for AuditWizard]] [[User Guide for AuditWizard|<u>Back to Contents</u>]]</p>
+
<p align="right">[[File:btn_back_up.png|link=User Guide for AuditWizard]]''' '''[[User Guide for AuditWizard|<u>Back to Contents</u>]]'''</p>
__FORCETOC__[[File:Aw admin aud scan config.jpg|thumbnail|Overview: Click to enlarge]]
+
__FORCETOC__
 +
=Overview=
 +
[[File:Aw admin aud scan config.jpg|center|link=]]
 +
 
 +
 
 
=Ribbon Commands=
 
=Ribbon Commands=
[[File:aw_admin_aud_scan_config_ribbon.png]]
+
[[File:aw_admin_aud_scan_config_ribbon.png|link=]]
  
===Scanner Configuration===
+
==Scanner Configuration==
 
''New Configuration'': Asks you to save the current configuration, if desired, then a set of defaults is displayed for modification, to become the new configuration.
 
''New Configuration'': Asks you to save the current configuration, if desired, then a set of defaults is displayed for modification, to become the new configuration.
  
Line 11: Line 15:
 
''Save Configuration'': Save the currently displayed settings with the name that appears in the ''Scanner Name'' field. If it already exists, you will be asked to confirm.
 
''Save Configuration'': Save the currently displayed settings with the name that appears in the ''Scanner Name'' field. If it already exists, you will be asked to confirm.
  
===Scanner Deployment===
+
==Scanner Deployment==
''Deploy to Network'': Writes the Scanner executable and configuration file to the [[AuditWizard™ - Getting Started - Pre-Installation#Network Share|network share]]. This must be done any time the Scanner configuration is changed, in order to output the settings to the configuration file used by the Scanner executable.
+
''Deploy to Network'': Writes the Scanner executable and configuration file to the '''[[AuditWizard - Getting Started - Pre-Installation - Network Share|network share]]'''. This must be done any time the Scanner configuration is changed, in order to output the settings to the configuration file used by the Scanner executable.
  
 
=Instant Settings=
 
=Instant Settings=
Line 18: Line 22:
  
 
#Go to Administration > Auditing > AuditScanner Configuration.
 
#Go to Administration > Auditing > AuditScanner Configuration.
#Enter the name of your [[AuditWizard™ - Getting Started - Pre-Installation - Network Share|network share]] in UNC format, ''\\SERVER\SHARE'', in the Network Share Folder field. AuditWizard will populate the Data Folder field based on this information.
+
#Enter the name of your '''[[AuditWizard - Getting Started - Pre-Installation - Network Share|network share]]''' in UNC format, ''\\SERVER\SHARE'', in the Network Share Folder field. AuditWizard will populate the Data Folder field based on this information.
 
#Click the ''Save Configuration'' button. This saves the configuration with the name in the Scanner Name field.
 
#Click the ''Save Configuration'' button. This saves the configuration with the name in the Scanner Name field.
 
#Click the ''Deploy to Network'' button. This writes the ''data'' and ''scanner'' folders to the root of the network share, if not present, then writes AuditScanner.exe and AuditScanner.xml (the Scanner executable and configuration file, respectively) into \\SERVER\SHARE\scanner.
 
#Click the ''Deploy to Network'' button. This writes the ''data'' and ''scanner'' folders to the root of the network share, if not present, then writes AuditScanner.exe and AuditScanner.xml (the Scanner executable and configuration file, respectively) into \\SERVER\SHARE\scanner.
<p align="right">[[File:btn_back_up.png|link=User Guide for AuditWizard]] [[User Guide for AuditWizard|<u>Back to Contents</u>]]</p>
+
<p align="right">[[File:btn_back_up.png|link=User Guide for AuditWizard]]''' '''[[User Guide for AuditWizard|<u>Back to Contents</u>]]'''</p>
  
 
=Advanced Settings=
 
=Advanced Settings=
Line 27: Line 31:
 
[[File:2011-02-22 1155.png]]
 
[[File:2011-02-22 1155.png]]
  
''Scanner Name'': The name for the scanner you are currently running. In addition to the technique of clicking the ''New Configuration'' button as noted above, you can create additional configurations by changing the Scanner name, then saving it, which saves a copy with the new name.
+
===Scanner Name===
 +
The name for the scanner you are currently running. In addition to the technique of clicking the ''New Configuration'' button as noted above, you can create additional configurations by changing the Scanner name, then saving it, which saves a copy with the new name.
  
''Description'': Description of the currently loaded Scanner configuration.
+
===Description===
 +
Description of the currently loaded Scanner configuration.
  
''Scanner Mode'':
+
===Scanner Mode===
#''Non-Interactive'': The scanner runs in the background and is not visible to the user.
+
====Non-Interactive====
#''Interactive'': The scanner is visible to the user so they can fill in custom forms.
+
The scanner runs in the background and is not visible to the user.
#''First Time Interactive'': The Scanner runs interactively the first time, then is invisible for subsequent audits. Useful for newly deployed computers that you want to get certain data from, but don't want users to see on a regular basis.
+
  
''Re-audit Interval'': The number of days that will pass before another audit is done. ''0'' is used to indicate that an audit will be done every time the Scanner runs.
+
====Interactive====
 +
The scanner is visible to the user so they can fill in custom forms.
  
''Run Scanner Invisible to the User'': Unchecking this option will place a notification icon in the notification area of the taskbar. The icon indicates that the Scanner is running.
+
====Pre-Population of Fields====
 +
To have the dialog fields pre-populated with the information entered in the past, disable the '''[[AuditWizard - Using AuditWizard - Administration - Auditing - Upload Options#Overwrite User-Defined Data|Overwrite User-Defined Data]]''' upload option.
  
''Enable Auto-Upload for the results of this Scanner'': There is a global setting that you can use to enable or disable automatic uploading in [[AuditWizard™ - Using AuditWizard - Administration - Auditing - Upload Options|Upload Options]]. If you want to disable an individual configuration, load the configuration, uncheck this option and save the configuration.
+
====Overwriting Fields====
 +
To have the dialog field pre-populated with the information currently being audited, overwriting any manually entered data from past audits, enable the '''[[AuditWizard - Using AuditWizard - Administration - Auditing - Upload Options#Overwrite User-Defined Data|Overwrite User-Defined Data]]''' upload option.
 +
 
 +
=====Interactive Options=====
 +
Click the ''Interactive Options'' button to open the Interactive Audit Designer dialog.
 +
 
 +
[[File:Aw scanner interactive 02.png|center|link=]]
 +
 
 +
 
 +
======Allow the User to Cancel the Audit======
 +
This setting lets the user stop the audit at any time during the dialog interaction.
 +
 
 +
======Display Basic Asset Information Screen======
 +
Fields from the ''Basic Information'' tab, viewable when an asset is selected in ''Network View'', will be displayed. Four of these fields can be independently displayed or hidden.
 +
 
 +
======Display Asset Location Screen======
 +
A separate page of the dialog will present the location structure so that the user can select where the computer is located.
 +
 
 +
======Display User Defined Data Screen(s)======
 +
A separate page of the dialog will present the user-defined fields, one page per user-defined data category.
 +
 
 +
====First Time Interactive====
 +
The Scanner runs interactively the first time, then is invisible for subsequent audits. Useful for newly deployed computers that you want to get certain data from, but don't want users to see on a regular basis.
 +
 
 +
===Re-audit Interval===
 +
The number of days that will pass before another audit is done. ''0'' is used to indicate that an audit will be done every time the Scanner runs.
 +
 
 +
===Run Scanner Invisible to the User===
 +
Unchecking this option will place a notification icon in the notification area of the taskbar. The icon indicates that the Scanner is running.
 +
 
 +
===Enable Auto-Upload for the results of this Scanner===
 +
There is a global setting that you can use to enable or disable automatic uploading in '''[[AuditWizard - Using AuditWizard - Administration - Auditing - Upload Options|Upload Options]]'''. If you want to disable an individual configuration, load the configuration, uncheck this option and save the configuration.
  
 
==Audited Items==
 
==Audited Items==
 
[[File:2011-02-22 1153.png]]
 
[[File:2011-02-22 1153.png]]
  
''Hardware'': Various attributes of the computer. Turn general classes on or off by clicking the Configure button.
+
===Hardware===
 +
Various attributes of the computer. Turn general classes on or off by clicking the Configure button.
  
''Internet Explorer Usage'': History of websites visited and stored cookies. Turn these options on or off by clicking the Configure button.
+
===Internet Explorer Usage===
 +
History of websites visited and stored cookies. Turn these options on or off by clicking the Configure button.
  
''File System'': You can specify folders to be scanned and types of files. Manage these by clicking the Configure button.
+
<p align="right">[[File:btn_back_up.png|link=User Guide for AuditWizard]]''' '''[[User Guide for AuditWizard|<u>Back to Contents</u>]]'''</p>
 +
===File System===
 +
You can specify types of files to be scanned.
  
''Windows Registry'': You can specify registry keys. Manage these by clicking the Configure button.
+
#Check the ''File System'' checkbox.
 +
#Click the ''Configure'' button. The File System Audit Details dialog will open:<br /><p>[[File:Lsd file system 01.png|link=]]'''<br /><br /></p>
 +
#The ''Folder'' section defines ''where'' the Scanner will look for files. To specify a specific folder or folders, click the ''Specified Folder(s)'' radio button. Click the ''Add'' button and enter a path. You can enter more than one. The paths are literal, i.e. exactly as they appear in a Windows Explorer address field. Wildcards are not supported. Note that in specifying a folder, any subfolders will also be searched, so, for example, to look for all the .pst files, choose ''C:\Users''.<br /><p>[[File:Lsd file system 02.png|link=]]'''<br />You can also specify ''All Folders'', but this will increase the time it takes to run an audit.<br /><br /></p>
 +
#The ''Files'' section lists the files you want to audit. ''All Executable Files'' will return any executable file, regardless of name. The files in ''Specified Files'' can be specific, such as ''game.exe'' or a wildcard can be used, such as ''*.pst''. ''All Files'' will return every file and will take a long time.<br /><p>[[File:Lsd file system 03.png|link=]]'''<br /><br /></p>
  
''Mobile Devices'': Audit mobile devices such as phones and PDAs and the files on them. Manage these by clicking the Configure button.
+
It's important to note the relationship between the settings in ''Folders'' and ''Files''. If you specify a folder or folders but don't specify files, you won't get any results. Similarly, if you configure files to audit and don't specify a folder, then you won't get results. The File System feature looks for the specified files in the specified folders. Note that you may sometimes not get results because those files weren't in that folder, though they may still be on the computer.
  
''USB Devices'': Audit USB devices such as flash drives and cameras that appear as drives and the files on them. Manage these by clicking the Configure button.
+
===Windows Registry===
 +
You can specify registry keys to be audited.
  
''Software'': Audits the software on a computer. Can be disabled.
+
#Check the ''Windows Registry'' checkbox and click the Configure button to open the Audit Registry Keys dialog.<br /><p>[[File:Lsd reg key01.png|link=]]'''<br /><br /></p>
<p align="right">[[File:btn_back_up.png|link=User Guide for AuditWizard]] [[User Guide for AuditWizard|<u>Back to Contents</u>]]</p>
+
#Click the ''Add Key'' button to open the Enter Registry Key dialog. Enter a Registry Key Name and Value Name, or click the Browse Registry button [[File:Aw btn reg key browse.png|link=]] to open a dialog to browse to the desired key.<br /><p>[[File:Aw reg key02.png|link=]]'''<br /><br /></p>
 +
#Click the ''OK'' button to save the Registry key. It will appear in the Enter Registry Key dialog.<br /><p>[[File:Aw reg key03.png|link=]]'''<br /><br /></p>
 +
#Click the ''OK'' button to close the Enter Registry Key dialog.
 +
 
 +
===Mobile Devices===
 +
Audit mobile devices such as phones and PDAs and the files on them. Manage these by clicking the Configure button.
 +
 
 +
===USB Devices===
 +
To audiit the presence of USB devices such as flash drives and cameras that appear as storage volumes, check the ''USB Devices'' checkbox.
 +
 
 +
Additionally, the files contained on USB devices can be audited. Click the ''Configure'' button.
 +
 
 +
By default, the ''No Files'' radio button is selected. This will audit the presence of drives but none of the files contained on them.
 +
 
 +
To audit specific files or file types, click the ''Specified Files'' radio button and click the ''Add'' button to enter a string. Use of an asterisk * will match any character(s), so ''*.mp3'' will audit any MP3 files, ''Doc*.docx'' will audit any .docx file beginning with ''Doc''. ''Document X.docx'' will audit that precise file name.
 +
 
 +
[[File:Aw admin scanner aud items usb.png|center|link=]]
 +
 
 +
 
 +
To audit all the files on USB devices, click the ''All Files'' radio button.
 +
 
 +
Click the ''OK'' button to save the settings.
 +
 
 +
===Software===
 +
Audits the software on a computer.
 +
 
 +
To configure, check the ''Software'' button and click the ''Configure'' button.
 +
 
 +
[[File:Aw admin scan config aud item software.png|center|link=]]
 +
 
 +
There are two options:
 +
 
 +
*Installed Applications: Any applications that are not part of the operating system
 +
*Operating System: The operating system itself.
 +
<p align="right">[[File:btn_back_up.png|link=User Guide for AuditWizard]]''' '''[[User Guide for AuditWizard|<u>Back to Contents</u>]]'''</p>
  
 
==Audit Scanner Location==
 
==Audit Scanner Location==
Line 67: Line 147:
  
 
==Results Location==
 
==Results Location==
 +
Here is where you can specify where the audits will go once a PC has been scanned. There are 3 different methods to send the results of the audit.
  
 
[[File:2011-02-22 1055.png|center|700px|thumb|Results Location configuration]]
 
[[File:2011-02-22 1055.png|center|700px|thumb|Results Location configuration]]
  
Here is where you can specify where the audits will go once a PC has been scanned. There are 3 different methods to send the results of the audit:
+
===Network Folder===
* ''Network Folder'' - As with the scanner location, the Data folder should be specified in UNC path notation. Users and Admins will need Full Access to the folder.
+
The Data folder should be specified in UNC path notation. Users and Admins will need '''[[AuditWizard - Getting Started - Pre-Installation - Network Share|Full Access]]''' to the folder.
* ''FTP Site'' - For off-site assets that cannot connect to the network. The audits upload to an FTP site, for later download to the server. Click ''Details'' and the following window will be displayed:
+
  
[[File:FTP Upload Settings.png|center|500px|thumb|FTP Upload Settings configuration]]
+
===FTP Site===
 +
For off-site assets that cannot connect to the network. The audits upload to an FTP site, for later download to the server. Click ''Details'' and the following window will be displayed:
  
 +
[[File:FTP Upload Settings.png|center|link=]]
  
Enter the Connection Type, Address, Port, Default Directory, and Login Credentials. Click ''OK'' to save the FTP settings.
 
  
* ''Removable Media Device'' - For storage on removable media, specify a folder path in the Data Folder field.
+
Enter the Connection Type, Address, Port, Default Directory, and Login Credentials. Click ''OK'' to save the FTP settings.
  
To upload a copy of audit data files to an FTP server, check ''Upload copy of audit data files'' and click the ''Details'' button. An [[:File:FTP Upload Settings.png|FTP Upload Settings]] window will be displayed where the FTP server information is entered.
+
===Removable Media Device===
 +
For storage on removable media, specify a folder path in the Data Folder field.
  
 
==Alert Monitor Settings==
 
==Alert Monitor Settings==
Line 89: Line 171:
 
This is where the basic settings are for activating AlertMonitor and configuring check intervals.
 
This is where the basic settings are for activating AlertMonitor and configuring check intervals.
  
To enable AlertMonitor, check ''Enable AlertMonitor for this Scanner Configuration''. To set specific alerts, go to [[AuditWizard™_-_Using_AuditWizard_-_Administration_-_Auditing_-_AlertMonitor_Configuration|AlertMonitor Configuration]].
+
To enable AlertMonitor, check ''Enable AlertMonitor for this Scanner Configuration''. To set specific alerts, go to '''[[AuditWizard_-_Using_AuditWizard_-_Administration_-_Auditing_-_AlertMonitor_Configuration|AlertMonitor Configuration]]'''.
  
 
''Check for Setting Changes Every: X Seconds'' – This setting denotes how often the Alert Monitor will check for changes on the system.
 
''Check for Setting Changes Every: X Seconds'' – This setting denotes how often the Alert Monitor will check for changes on the system.
Line 95: Line 177:
 
''Check for Alterable Changes Every: X Seconds'' – This setting tells the Alert Monitor how often to send the changes it has found back to the server.
 
''Check for Alterable Changes Every: X Seconds'' – This setting tells the Alert Monitor how often to send the changes it has found back to the server.
  
''Select a predefined Alert Monitor Definition:'' This is where you can select a default trigger that you have setup in [[AuditWizard™_-_Using_AuditWizard_-_Administration_-_Auditing_-_AlertMonitor_Configuration|AlertMonitor Configuration]].
+
''Select a predefined Alert Monitor Definition:'' This is where you can select a default trigger that you have setup in '''[[AuditWizard_-_Using_AuditWizard_-_Administration_-_Auditing_-_AlertMonitor_Configuration|AlertMonitor Configuration]]'''.
<p align="right">[[File:btn_back_up.png|link=User Guide for AuditWizard]] [[User Guide for AuditWizard|<u>Back to Contents</u>]]</p>
+
 
 +
=Configuring the Logon Script=
 +
When you first install AuditWizard, the '''[[AuditWizard - Getting Started - Setup Wizard|Setup Wizard]]''' has a step that gives you the strings to use in your logon script. This is reproduced here:
 +
 
 +
==Windows Networks==
 +
Add the following line to your Windows Logon Script
 +
 
 +
    Start \\SERVER\SHARE\scanner\AuditScanner.exe
 +
 
 +
==Novell Networks==
 +
Add the following line to your Novell Networks Logon Script
 +
 
 +
    @\\SERVER\SHARE\scanner\AuditScanner.exe
 +
 
 +
='''[[AuditWizard - Using AuditWizard - Administration - Auditing - AuditScanner Configuration - Rebuild the Scanner|Rebuild the Scanner]]'''=
 +
Most upgrades will require the scanner to be rebuilt and redeployed in order to ensure that the latest version is in use. The '''[[AW Current Version|Release Notes]]''' will confirm this. To rebuild the scanner:
 +
 
 +
#Go to Administration > Auditing > AuditScanner Configuration.
 +
#Click the ''Save Configuration'' button. This saves the configuration with the name in the Scanner Name field.
 +
#Click the ''Deploy to Network'' button. This writes the ''data'' and ''scanner'' folders to the root of the network share.
 +
<p align="right">[[File:btn_back_up.png|link=User Guide for AuditWizard]]''' '''[[User Guide for AuditWizard|<u>Back to Contents</u>]]'''</p>

Latest revision as of 03:53, 11 March 2020

Btn back up.png Back to Contents

Contents

[edit] Overview

Aw admin aud scan config.jpg


[edit] Ribbon Commands

Aw admin aud scan config ribbon.png

[edit] Scanner Configuration

New Configuration: Asks you to save the current configuration, if desired, then a set of defaults is displayed for modification, to become the new configuration.

Load Configuration: Load a saved configuration.

Save Configuration: Save the currently displayed settings with the name that appears in the Scanner Name field. If it already exists, you will be asked to confirm.

[edit] Scanner Deployment

Deploy to Network: Writes the Scanner executable and configuration file to the network share. This must be done any time the Scanner configuration is changed, in order to output the settings to the configuration file used by the Scanner executable.

[edit] Instant Settings

These settings are the minimum you need in order to use the Scanner.

  1. Go to Administration > Auditing > AuditScanner Configuration.
  2. Enter the name of your network share in UNC format, \\SERVER\SHARE, in the Network Share Folder field. AuditWizard will populate the Data Folder field based on this information.
  3. Click the Save Configuration button. This saves the configuration with the name in the Scanner Name field.
  4. Click the Deploy to Network button. This writes the data and scanner folders to the root of the network share, if not present, then writes AuditScanner.exe and AuditScanner.xml (the Scanner executable and configuration file, respectively) into \\SERVER\SHARE\scanner.

Btn back up.png Back to Contents

[edit] Advanced Settings

[edit] General Settings

2011-02-22 1155.png

[edit] Scanner Name

The name for the scanner you are currently running. In addition to the technique of clicking the New Configuration button as noted above, you can create additional configurations by changing the Scanner name, then saving it, which saves a copy with the new name.

[edit] Description

Description of the currently loaded Scanner configuration.

[edit] Scanner Mode

[edit] Non-Interactive

The scanner runs in the background and is not visible to the user.

[edit] Interactive

The scanner is visible to the user so they can fill in custom forms.

[edit] Pre-Population of Fields

To have the dialog fields pre-populated with the information entered in the past, disable the Overwrite User-Defined Data upload option.

[edit] Overwriting Fields

To have the dialog field pre-populated with the information currently being audited, overwriting any manually entered data from past audits, enable the Overwrite User-Defined Data upload option.

[edit] Interactive Options

Click the Interactive Options button to open the Interactive Audit Designer dialog.

Aw scanner interactive 02.png


[edit] Allow the User to Cancel the Audit

This setting lets the user stop the audit at any time during the dialog interaction.

[edit] Display Basic Asset Information Screen

Fields from the Basic Information tab, viewable when an asset is selected in Network View, will be displayed. Four of these fields can be independently displayed or hidden.

[edit] Display Asset Location Screen

A separate page of the dialog will present the location structure so that the user can select where the computer is located.

[edit] Display User Defined Data Screen(s)

A separate page of the dialog will present the user-defined fields, one page per user-defined data category.

[edit] First Time Interactive

The Scanner runs interactively the first time, then is invisible for subsequent audits. Useful for newly deployed computers that you want to get certain data from, but don't want users to see on a regular basis.

[edit] Re-audit Interval

The number of days that will pass before another audit is done. 0 is used to indicate that an audit will be done every time the Scanner runs.

[edit] Run Scanner Invisible to the User

Unchecking this option will place a notification icon in the notification area of the taskbar. The icon indicates that the Scanner is running.

[edit] Enable Auto-Upload for the results of this Scanner

There is a global setting that you can use to enable or disable automatic uploading in Upload Options. If you want to disable an individual configuration, load the configuration, uncheck this option and save the configuration.

[edit] Audited Items

2011-02-22 1153.png

[edit] Hardware

Various attributes of the computer. Turn general classes on or off by clicking the Configure button.

[edit] Internet Explorer Usage

History of websites visited and stored cookies. Turn these options on or off by clicking the Configure button.

Btn back up.png Back to Contents

[edit] File System

You can specify types of files to be scanned.

  1. Check the File System checkbox.
  2. Click the Configure button. The File System Audit Details dialog will open:

    Lsd file system 01.png

  3. The Folder section defines where the Scanner will look for files. To specify a specific folder or folders, click the Specified Folder(s) radio button. Click the Add button and enter a path. You can enter more than one. The paths are literal, i.e. exactly as they appear in a Windows Explorer address field. Wildcards are not supported. Note that in specifying a folder, any subfolders will also be searched, so, for example, to look for all the .pst files, choose C:\Users.

    Lsd file system 02.png
    You can also specify All Folders, but this will increase the time it takes to run an audit.

  4. The Files section lists the files you want to audit. All Executable Files will return any executable file, regardless of name. The files in Specified Files can be specific, such as game.exe or a wildcard can be used, such as *.pst. All Files will return every file and will take a long time.

    Lsd file system 03.png

It's important to note the relationship between the settings in Folders and Files. If you specify a folder or folders but don't specify files, you won't get any results. Similarly, if you configure files to audit and don't specify a folder, then you won't get results. The File System feature looks for the specified files in the specified folders. Note that you may sometimes not get results because those files weren't in that folder, though they may still be on the computer.

[edit] Windows Registry

You can specify registry keys to be audited.

  1. Check the Windows Registry checkbox and click the Configure button to open the Audit Registry Keys dialog.

    Lsd reg key01.png

  2. Click the Add Key button to open the Enter Registry Key dialog. Enter a Registry Key Name and Value Name, or click the Browse Registry button Aw btn reg key browse.png to open a dialog to browse to the desired key.

    Aw reg key02.png

  3. Click the OK button to save the Registry key. It will appear in the Enter Registry Key dialog.

    Aw reg key03.png

  4. Click the OK button to close the Enter Registry Key dialog.

[edit] Mobile Devices

Audit mobile devices such as phones and PDAs and the files on them. Manage these by clicking the Configure button.

[edit] USB Devices

To audiit the presence of USB devices such as flash drives and cameras that appear as storage volumes, check the USB Devices checkbox.

Additionally, the files contained on USB devices can be audited. Click the Configure button.

By default, the No Files radio button is selected. This will audit the presence of drives but none of the files contained on them.

To audit specific files or file types, click the Specified Files radio button and click the Add button to enter a string. Use of an asterisk * will match any character(s), so *.mp3 will audit any MP3 files, Doc*.docx will audit any .docx file beginning with Doc. Document X.docx will audit that precise file name.

Aw admin scanner aud items usb.png


To audit all the files on USB devices, click the All Files radio button.

Click the OK button to save the settings.

[edit] Software

Audits the software on a computer.

To configure, check the Software button and click the Configure button.

Aw admin scan config aud item software.png

There are two options:

  • Installed Applications: Any applications that are not part of the operating system
  • Operating System: The operating system itself.

Btn back up.png Back to Contents

[edit] Audit Scanner Location

Audit Scanner Location configuration

Here is where you can define where the scanner will be built to. It is recommended that this location be in UNC path notation (\\ServerName\Folder). Users will need at least Read access to this folder. Admins will need Read/Write access if they are building new scanners.

[edit] Results Location

Here is where you can specify where the audits will go once a PC has been scanned. There are 3 different methods to send the results of the audit.

Results Location configuration

[edit] Network Folder

The Data folder should be specified in UNC path notation. Users and Admins will need Full Access to the folder.

[edit] FTP Site

For off-site assets that cannot connect to the network. The audits upload to an FTP site, for later download to the server. Click Details and the following window will be displayed:

FTP Upload Settings.png


Enter the Connection Type, Address, Port, Default Directory, and Login Credentials. Click OK to save the FTP settings.

[edit] Removable Media Device

For storage on removable media, specify a folder path in the Data Folder field.

[edit] Alert Monitor Settings

Alert Monitor Settings configuration

This is where the basic settings are for activating AlertMonitor and configuring check intervals.

To enable AlertMonitor, check Enable AlertMonitor for this Scanner Configuration. To set specific alerts, go to AlertMonitor Configuration.

Check for Setting Changes Every: X Seconds – This setting denotes how often the Alert Monitor will check for changes on the system.

Check for Alterable Changes Every: X Seconds – This setting tells the Alert Monitor how often to send the changes it has found back to the server.

Select a predefined Alert Monitor Definition: This is where you can select a default trigger that you have setup in AlertMonitor Configuration.

[edit] Configuring the Logon Script

When you first install AuditWizard, the Setup Wizard has a step that gives you the strings to use in your logon script. This is reproduced here:

[edit] Windows Networks

Add the following line to your Windows Logon Script

   Start \\SERVER\SHARE\scanner\AuditScanner.exe

[edit] Novell Networks

Add the following line to your Novell Networks Logon Script

   @\\SERVER\SHARE\scanner\AuditScanner.exe

[edit] Rebuild the Scanner

Most upgrades will require the scanner to be rebuilt and redeployed in order to ensure that the latest version is in use. The Release Notes will confirm this. To rebuild the scanner:

  1. Go to Administration > Auditing > AuditScanner Configuration.
  2. Click the Save Configuration button. This saves the configuration with the name in the Scanner Name field.
  3. Click the Deploy to Network button. This writes the data and scanner folders to the root of the network share.

Btn back up.png Back to Contents

Personal tools
Namespaces

Variants
Actions
Main Page
Online User Guides
General Support
Release Notes
Toolbox