get client's security-log thru WIN2K GPO?

robin

Distinguished
Apr 3, 2004
246
0
18,680
Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi,

I am currently using WIn2000 SP4 Active Directory.
Clients are running on Win2K Profession SP4. All clients
are join to a Domain.


I have currently written a simple script using a SQL
statement to extract the system security log:

strComputer = "."
Set objWMI = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate,(Security)}!
\\" _
& strComputer & "\root\cimv2")

strWMI = "SELECT * FROM Win32_NTLogEvent WHERE
(LogFile = 'Security')"

Question:
1)I want to implement this script program to a large
group of clients machine that is group under a domain.
Wonder if it is possible to implement this script through
a Active Directory Group Policy(GPO)?
If so, how can this be done?
2)Can I schedule a specific timing to run this script
through the GPO?
 
Archived from groups: microsoft.public.win2000.group_policy (More info?)

Yes. You can assing it as a startup script in the computer config section of
a GPO. A startup script runs when the PC starts, but, if you wanted to
schedule it, you could assign a startup script which used the AT utility to
schedule running the event collection script.

--
--
Brian Desmond
Windows Server MVP
desmondb@payton.cps.k12.il.us

Http://www.briandesmond.com


"robin" <juayboyin@bcsis.com> wrote in message
news:2cb901c4287b$f3bb3fc0$a101280a@phx.gbl...
> Hi,
>
> I am currently using WIn2000 SP4 Active Directory.
> Clients are running on Win2K Profession SP4. All clients
> are join to a Domain.
>
>
> I have currently written a simple script using a SQL
> statement to extract the system security log:
>
> strComputer = "."
> Set objWMI = GetObject("winmgmts:" _
> & "{impersonationLevel=impersonate,(Security)}!
> \\" _
> & strComputer & "\root\cimv2")
>
> strWMI = "SELECT * FROM Win32_NTLogEvent WHERE
> (LogFile = 'Security')"
>
> Question:
> 1)I want to implement this script program to a large
> group of clients machine that is group under a domain.
> Wonder if it is possible to implement this script through
> a Active Directory Group Policy(GPO)?
> If so, how can this be done?
> 2)Can I schedule a specific timing to run this script
> through the GPO?
>
>
>
>
 
Archived from groups: microsoft.public.win2000.group_policy (More info?)

Hi Brian,

may I know what is the AT utility, how do I configure that?
thanx


>-----Original Message-----
>Yes. You can assing it as a startup script in the
computer config section of
>a GPO. A startup script runs when the PC starts, but, if
you wanted to
>schedule it, you could assign a startup script which used
the AT utility to
>schedule running the event collection script.
>
>--
>--
>Brian Desmond
>Windows Server MVP
>desmondb@payton.cps.k12.il.us
>
>Http://www.briandesmond.com
>
>
>"robin" <juayboyin@bcsis.com> wrote in message
>news:2cb901c4287b$f3bb3fc0$a101280a@phx.gbl...
>> Hi,
>>
>> I am currently using WIn2000 SP4 Active Directory.
>> Clients are running on Win2K Profession SP4. All clients
>> are join to a Domain.
>>
>>
>> I have currently written a simple script using a SQL
>> statement to extract the system security log:
>>
>> strComputer = "."
>> Set objWMI = GetObject("winmgmts:" _
>> & "{impersonationLevel=impersonate,(Security)}!
>> \\" _
>> & strComputer & "\root\cimv2")
>>
>> strWMI = "SELECT * FROM Win32_NTLogEvent WHERE
>> (LogFile = 'Security')"
>>
>> Question:
>> 1)I want to implement this script program to a large
>> group of clients machine that is group under a domain.
>> Wonder if it is possible to implement this script
through
>> a Active Directory Group Policy(GPO)?
>> If so, how can this be done?
>> 2)Can I schedule a specific timing to run this script
>> through the GPO?
>>
>>
>>
>>
>
>
>.
>
 
Archived from groups: microsoft.public.win2000.group_policy (More info?)

Robin-

It's a command line utility for scheduling tasks. Run at /? to get the
options. I believe it's included with Windows, otherwise it's in the free
resource kit tools download.

--
--
Brian Desmond
Windows Server MVP
desmondb@payton.cps.k12.il.us

Http://www.briandesmond.com


"robin" <anonymous@discussions.microsoft.com> wrote in message
news:316f01c428e0$e0437880$a501280a@phx.gbl...
> Hi Brian,
>
> may I know what is the AT utility, how do I configure that?
> thanx
>
>
> >-----Original Message-----
> >Yes. You can assing it as a startup script in the
> computer config section of
> >a GPO. A startup script runs when the PC starts, but, if
> you wanted to
> >schedule it, you could assign a startup script which used
> the AT utility to
> >schedule running the event collection script.
> >
> >--
> >--
> >Brian Desmond
> >Windows Server MVP
> >desmondb@payton.cps.k12.il.us
> >
> >Http://www.briandesmond.com
> >
> >
> >"robin" <juayboyin@bcsis.com> wrote in message
> >news:2cb901c4287b$f3bb3fc0$a101280a@phx.gbl...
> >> Hi,
> >>
> >> I am currently using WIn2000 SP4 Active Directory.
> >> Clients are running on Win2K Profession SP4. All clients
> >> are join to a Domain.
> >>
> >>
> >> I have currently written a simple script using a SQL
> >> statement to extract the system security log:
> >>
> >> strComputer = "."
> >> Set objWMI = GetObject("winmgmts:" _
> >> & "{impersonationLevel=impersonate,(Security)}!
> >> \\" _
> >> & strComputer & "\root\cimv2")
> >>
> >> strWMI = "SELECT * FROM Win32_NTLogEvent WHERE
> >> (LogFile = 'Security')"
> >>
> >> Question:
> >> 1)I want to implement this script program to a large
> >> group of clients machine that is group under a domain.
> >> Wonder if it is possible to implement this script
> through
> >> a Active Directory Group Policy(GPO)?
> >> If so, how can this be done?
> >> 2)Can I schedule a specific timing to run this script
> >> through the GPO?
> >>
> >>
> >>
> >>
> >
> >
> >.
> >