Verify Policy updates are properly being applied.

Forums

My Profile

Inbox

Address Book

My Subscription

My Forums

Verify Policy updates are properly being applied.

Logged in as: Guest

arrSession:exec spGetSession 2,16,56038

	Active Users: There are 0 members and 0 guests.
	Users viewing this topic: none

Printable Version

All Forums >> [Scripting] >> Post a VBScript >> Verify Policy updates are properly being applied.
Do you like VisualBasicScript.com? Link to us and help spread the word about our forum. Thanks!

Page: [1]

Message

<< Older Topic Newer Topic >>

Verify Policy updates are properly being applied. - 1/28/2008 6:08:23 AM

Stumpedtechy

Posts: 41
Score: 0
Joined: 11/30/2007
Status: offline

Here is a script I have that runs against the machines on the domain and it tells you if they are updating their GPO's properly.
For those of you unaware Group Policy processing is highly dependant upon the C:\WINDOWS\SECURITY\DATABASE\secedit.sdb file.

This requires you have admin access on the workstations of course.

' ************************************************************************
' ************************************************************************
' ***               
' *** This script can be used to verify Group Policies are updating   
' ***   on remote workstations on the domain.
' ***       
' ***   OUTPUT_FILE_NAME defines the name of the file that the logging 
' ***   will be written to.
' ***   purposes:         
' ***               
' ***   Select Name, Location from 'LDAP:// = Needs to be modified for 
' ***   your domain.
' ***               
' *** Reading the log file - Column 1 - Machine Name, Column 2 - File Created
' ***   Tells you created date (helpful for finding ghost imaged computers), if
' ***   the PC isn't pingable, or if you lack permissions, Column 3 - File modified
' ***   if it is an old file modified date something is wrong with GPO processing
' ***   and possibly that file as well.              
' ************************************************************************
' ************************************************************************
Const ADS_SCOPE_SUBTREE = 2
strDate = Replace(Date,"/","-")
strTime = Replace(Time,":","-")
OUTPUT_FILE_NAME = "Check File creation and modification date on secedit "&strDate&" @ "&strTime&".csv"
Set objConnection = CreateObject("ADODB.Connection")
Set objCommand =   CreateObject("ADODB.Command")
objConnection.Provider = "ADsDSOObject"
objConnection.Open "Active Directory Provider"
Set objFSO = WScript.CreateObject("Scripting.FileSystemObject")
   Set objFileOutput = objFSO.CreateTextFile(OUTPUT_FILE_NAME)
   objFileoutput.WriteLine "Device name,File Created,File Modified"

Set objCOmmand.ActiveConnection = objConnection
objCommand.CommandText = _
   "Select Name, Location from 'LDAP://OU=MyOU,DC=my,DC=domain,DC=com' " _
       & "Where objectClass='computer'"  
objCommand.Properties("Page Size") = 1000
objCommand.Properties("Searchscope") = ADS_SCOPE_SUBTREE 
Set objRecordSet = objCommand.Execute
objRecordSet.MoveFirst
Do Until objRecordSet.EOF
strDeviceName = objRecordSet.Fields("Name").Value
    If IsAlive(strDeviceName) = True then
Set objDevice = GetObject("WinNT://" & strDeviceName )
On Error Resume Next
Err.Clear
Set objWMIService = GetObject("winmgmts:\\" & strDeviceName & "\root\cimv2")
If Err.Number <>0 Then
objFileOutput.WriteLine strDeviceName & ",Unable to access machine remotely please check permissons on this computer."
On Error Goto 0
Else
Set filesys = CreateObject("Scripting.FileSystemObject")
Set modfile = filesys.GetFile("\\" & strDeviceName & "\C$\WINDOWS\SECURITY\DATABASE\secedit.sdb")
createdate =  modfile.DateCreated
moddate = modfile.DateLastModified
objFileOutput.WriteLine ""&strDeviceName &"," & createdate &"," & moddate &""
End if
Else
objFileOutput.WriteLine strDeviceName & ",Unable to ping PC. Ensure its active on the network."
End if
objRecordSet.MoveNext
     Loop
MsgBox "Execution completed successfully.  For logging information, please view the '" & OUTPUT_FILE_NAME & "' file.", vbInformation, "Execution completed"
Function IsAlive(strDeviceName) 
'---------- Test to see if host or url alive through ping -----------------
' Returns True if Host responds to ping
' 
' Though there are other ways to ping a computer, Win2K,
' XP and different versions of PING return different error
' codes. So the only reliable way to see if the ping
' was sucessful is to read the output of the ping
' command and look for "TTL="
' 
' strRComputer is a hostname or IP 
   Const OpenAsASCII = 0 
    Const FailIfNotExist = 0 
    Const ForReading =  1 
    Dim objShell, objFSO, sTempFile, fFile 
   Set objShell = CreateObject("WScript.Shell") 
    Set objFSO = CreateObject("Scripting.FileSystemObject") 
   sTempFile = objFSO.GetSpecialFolder(2).ShortPath & "\" & objFSO.GetTempName 
   objShell.Run "%comspec% /c ping.exe -n 2 -w 500 " & strDeviceName & ">" & sTempFile, 0 , True 
   Set fFile = objFSO.OpenTextFile(sTempFile, ForReading, FailIfNotExist, OpenAsASCII) 
   Select Case InStr(fFile.ReadAll, "TTL=") 
        Case 0
           IsAlive = False 
        Case Else
           IsAlive = True 
   End Select 
   ffile.close 
    objFSO.DeleteFile(sTempFile)
   Set objFSO = Nothing
   Set objShell = Nothing
End Function