General discussion

Locked

NT Logon Scripts and Track It!

By XpertDragon ·
Hey All:

Im just about to implement "Track It" auditing software across our NT domain via Logon Scripts. I guess I have several questions here:

1.) Is there a way to get a simple listing of what Users use which logon script? I would say there are about 7 different batch files for about 90 different users. I want to execute the Audit32.exe within ONE specific batch file, and easily know which users this will affect.

2.) Does anyone have any good general experiences and or suggestions for a succesful implementation of "Track It" audit software across a network? he Blue Ocean web site doesn't have a lot of specific help.

Thanks.

Paul M. Chavez

This conversation is currently closed to new comments.

8 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

NT Logon Scripts and Track It!

by curlergirl In reply to NT Logon Scripts and Trac ...

Unfortunately, I don't know of any way in NT 4.0 to get a listing of what users use which login scripts, short of manually looking at each user's account in User Mgr. for Domains. As far as implementing TrackIt - we've done this at several different sites and it seems to work pretty smoothly. The key points seem to be:

1. When you install TrackIt, be sure to install it to a directory where all users have the appropriate read/write access so that the audits will work properly.
2. Put theappropriate command in the login scripts or in a separate batch file that you call from the script (i.e., [drive]:\TrackIt\audit32.exe)
One other important piece, we've found, is to decide how you are going to sort the data when you import it - i.e., using a department name, or some sort of numbering scheme. This may have been harder for us, since we use it for multiple external clients. We had to do some initial massaging of the data after the first audit to conform to our needs. Other than that, everything seems to run quite smoothly. Hope this helps!

Collapse -

NT Logon Scripts and Track It!

by XpertDragon In reply to NT Logon Scripts and Trac ...

Thanks for your help. This software gets a fair share of criticism, but it shoukd do a fair job. I guess I just have to jump in and get it done, and hope for good results. Thanks for all 3 great answers.

Collapse -

NT Logon Scripts and Track It!

by Joseph Moore In reply to NT Logon Scripts and Trac ...

1)Well, you can run the NET USER command against each domain user account. NET USER gives you a lot of information, including the login script used. Here is an example of what I get when I run NET USER JOE /DOMAIN >>EXAMPLE.TXT (this will pipe the screen output to the text file:

The request will be processed at a domain controller for domain DOMAIN.


User name JOE
Full Name Joseph Moore
Comment Network Engineer
User's comment
Country code 000 (System Default)
Account active Yes
Account expires Never

Password last set 3/20/2002 7:29 PM
Password expires 4/19/2002 7:29 PM
Password changeable 3/20/2002 7:29 PM
Password required Yes
User may change password Yes

Workstations allowed All
Logon script sys.bat
User profile
Home directory \\PDC\JOE$
Last logon 4/2/2002 3:53 PM

Logon hours allowed All

Local Group Memberships *Administrators
Global Group memberships *Domain Users *Domain Admins

The command completed successfully.


So, if you ran this for every user in your domain, and sent the output to the same text file, you would have everything. You could script this in a BAT file to run it all at once. Just generate a list of all your domain users (using NET USER /DOMAIN >>domainusers.txt will do that)
then set up NET USER lines for each one.

Collapse -

NT Logon Scripts and Track It!

by Joseph Moore In reply to NT Logon Scripts and Trac ...

Another avenue is to use the wonderful program Dameware NT Utilities. It has an Export feature that will export the entire user list into a comma-delimited file with the same info the NET USER gives you. You can then pull up the comma-delimited fileinto your favorite spreadsheet program and sort away. Personally, that is what I do to check password permission policies at remote sites.
Using Dameware would be easier, but it is not free. You can download a 30-day trial.
www.dameware.com

2) Sorry, can't help. Never used the product.

Collapse -

NT Logon Scripts and Track It!

by Joseph Moore In reply to NT Logon Scripts and Trac ...

Forgot to mention the NET USER switch /DOMAIN is NOT replaced by your domain name. It is a general Domain switch. So, if your NT domain is called MYDOMAIN, and you want to check the account BOB, you would type in:

NET USER BOB /DOMAIN

And you will get the info for MYDOMAIN/BOB.

hope this helps

Collapse -

NT Logon Scripts and Track It!

by XpertDragon In reply to NT Logon Scripts and Trac ...

Thanks for your help. This software gets a fair share of criticism, but it shoukd do a fair job. I guess I just have to jump in and get it done, and hope for good results. Thanks for all 3 great answers.

Collapse -

NT Logon Scripts and Track It!

by Green Lantern In reply to NT Logon Scripts and Trac ...

Create a logon script with track32.exe and have it call or branch to the other scripts. Thats how we do multiple scripts here.

Collapse -

NT Logon Scripts and Track It!

by XpertDragon In reply to NT Logon Scripts and Trac ...

This question was closed by the author

Back to Windows Forum
8 total posts (Page 1 of 1)  

Related Discussions

Related Forums