Announcement

Collapse
No announcement yet.

scanning active directory

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • scanning active directory

    Hi!

    Is there any free tool available that can be use to scan active directory computers detail. Like the encryption is enable on computer or not, anti virus status etc ?

    Regards,

    Sajid

  • #2
    Re: scanning active directory

    Hi,

    Give it a try

    microsoft baseline analyser.
    Thanks & Regards
    v-2nas

    MCTS 2008, MCTIP, MCSE 2003, MCSA+Messaging E2K3, MCP, E2K7
    Sr. Wintel Eng. (Investment Bank)
    Independent IT Consultant and Architect
    Blog: http://www.exchadtech.blogspot.com

    Show your appreciation for my help by giving reputation points

    Comment


    • #3
      Re: scanning active directory

      If you have the budget, SCOM and SCCM will do much of it
      Tom Jones
      MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
      PhD, MSc, FIAP, MIITT
      IT Trainer / Consultant
      Ossian Ltd
      Scotland

      ** Remember to give credit where credit is due and leave reputation points where appropriate **

      Comment


      • #4
        Re: scanning active directory

        we are implementing bit locker on computers. Is there any way i can check which computer is encrypted and which is not. thats the only info i want.

        Regards,

        Comment


        • #5
          Re: scanning active directory

          Hi,

          You can use the following free utility to check if the volume/disk is encrypted or not

          http://www.jadsoftware.com/go/?page_id=167
          Thanks & Regards
          v-2nas

          MCTS 2008, MCTIP, MCSE 2003, MCSA+Messaging E2K3, MCP, E2K7
          Sr. Wintel Eng. (Investment Bank)
          Independent IT Consultant and Architect
          Blog: http://www.exchadtech.blogspot.com

          Show your appreciation for my help by giving reputation points

          Comment


          • #6
            Re: scanning active directory

            A few more options:
            "Verifying that BitLocker is enabled"
            http://technet.microsoft.com/en-us/l...fyingbitlocker
            You can combine this with psexec from Sysinternals to check multiple computers at once.
            http://technet.microsoft.com/en-us/s.../bb897553.aspx

            If you can script, you can build one that will check remote computers via WMI:
            http://msdn.microsoft.com/en-us/libr...(v=VS.85).aspx
            Last edited by venom83; 13th November 2010, 18:54. Reason: Added psexec option
            Regards,
            Leonid

            MCSE 2003, MCITP EA, VCP4.

            Comment


            • #7
              Re: scanning active directory

              Thanks all for your replies

              I am looking for little thing in a way that i can scan the whole domain and see the list of computers which are not encrypted.

              Regards,

              Comment


              • #8
                Re: scanning active directory

                The following script can do what you need on a single computer; I'm sure it can be adjusted to run on OU.
                http://gallery.technet.microsoft.com...0-1f5085603392
                Regards,
                Leonid

                MCSE 2003, MCITP EA, VCP4.

                Comment


                • #9
                  Re: scanning active directory

                  Thanks again. I am not very good in scripting but no worries. I posted the question that may be there is some easy tool available in which you enter your domain username\password and get the information.

                  Thanks for help.


                  Regards,

                  Comment


                  • #10
                    Re: scanning active directory

                    This thing look nice:

                    manage-bde -status -cn COMPUTERNAME

                    Comment


                    • #11
                      Re: scanning active directory

                      Nice man.
                      Take this and put it into a batch or something. You'll still need a file with computer names and then you can use psexec or batch to scan the list of those computers. Need help creating that list?
                      Regards,
                      Leonid

                      MCSE 2003, MCITP EA, VCP4.

                      Comment


                      • #12
                        Re: scanning active directory

                        Yes need help in making list of computers . They are so many. I wish i can just scan the OU and see which computers dont have Bitlocker .

                        Comment


                        • #13
                          Re: scanning active directory

                          This should help you.
                          http://www.experts-exchange.com/Soft..._22853510.html
                          BTW, if you can't view the results, search the article title in Google. When you get there from Google, scroll downwards to see the answer. Works for this site every time
                          Regards,
                          Leonid

                          MCSE 2003, MCITP EA, VCP4.

                          Comment

                          Working...
                          X