IT Audit Tools Needed

I use a product called DameWare that allows me to export the user information you described. In the export utility you will have a list of users, and the last time their password was changed (in a csv or xml format).

You can also get information on the server shares and what groups are assigned access to them.

For Windows vulnerabilites, you can run the hfnetchk utility. After you download the app, you can make a simple batch file that will poll and dump the data:

@echo off

REM =====================================================================================
REM
REM Sets default starting location, and sets string for file name (yyyy/mm/dd)
REM
REM =====================================================================================

REM @echo What is today's date (YYYY.MM.DD) ENTER..

REM set /p name=

cd \

REM =====================================================================================
REM
REM SETS LOG DIRECTORY. USED TO DELETE OLD LOG FILE
REM
REM =====================================================================================

cd logs\\
del *.txt

REM =====================================================================================
REM
REM CREATES AN INDIVIDUAL TXT FILE FOR EACH SERVER
REM
REM =====================================================================================

cd\
cd progra~1\mida86~1\

mbsacli.exe /hf -v -i -u -p -f c:\LOGS\\..txt

REM =====================================================================================
REM
REM This command is used to zip the contents of the c:\logs\ directory into a
REM zip file named .zip
REM
REM =====================================================================================

wzzip "c:\logs\\ - %name%.zip" c:\logs\\*.txt -pr

REM =====================================================================================
REM
REM This command is used to move the last zipped up file to the archive section.
REM
REM =====================================================================================

move /Y c:\logs\\*.zip c:\logs\\old_logs\

--------------

I implicitly name and IP above so I can track multiple servers inside and outside the domain.

I'm not a PERL or scripter, I like to stay simple for me with batch files.

Good luck.

My company uses SecurityExpressions which is made by the same outfit (Altiris -- formerly, Pedestal Software) for this purpose. We use it for both Windows and UNIX systems. It's agent-less and customizable.

http://www.altiris.com/Products/SecurityExpressions.aspx

Good luck in your search.