ID 1054

HOW TO: Manually Audit Computers which are not on your Network

Description
Applies to MT Audit Version 7.2 and newer

The typical audit process used in Mouse Tracks requires that the computers being audited are on the same network as the computer that is running the MT Audit Wizard.

There cases where you may want to audit stand alone computers or laptops which may not be connected to your network.

MT Audit Version 7.2 introduces a way to audit computers which are disconnected from your network.

Audit via USB Flash Drive, portable hard drive or Floppy Disk
1. Copy the file C:\Program Files\Gritware\Mouse Tracks 2009\MtAudit\MtAudit.exe to a removeable drive
2. Connect the remote drive to the computer you wish to audit.
3. Open the drive and double click MtAudit.exe

Upon completion of the audit the program creates a file named ".xml". This file is located in the same folder as the MtAudit.exe file.

Import Audits in Mouse Tracks
1. Connect the removeable drive used to audit these computers to a computer that has the Mouse Tracks Windows Client Installed.
2. Run Mouse Tracks and choose Tools-Import Audit Files from Disk
3. Browse to the location of your removeable drive
4. Click Import


Note:

The audit program was written in .NET and conforms to the managed code security enforced by Windows Operating Systems. Due to the fact that the audit program reads registry information the application must run as 'FullTrust'. By default applications which are executed from a local file path on the computer receive FullTrust. This is why we recommend running auditing computers that are not on your network using a USB flash drive or floppy disk.

If you wish to run MtAudit.exe from a disconnected network you willl need to elevate the share from which the program will be run to a 'FullTrust' share. Below are the steps to enable a computer to fully trust managed code from a network share…

1. Open a command prompt
2. Type "cd %windir%\Microsoft.Net\Framework\2.0.50727
3. Type "CasPol.exe -m -ag 1.2 -url file://\\YourServer/YourMtAuditShare/* FullTrust"

For more information on caspol.exe visit…

http://blogs.msdn.com/shawnfa/archive/2004/12/30/344554.aspx


Date: Wednesday, August 12, 2009

Knowledge Base Search