<<

Automated PC Audits via Scheduled Task using EZ Audit®


IMPORTANT: You need to have a Domain to do automated audits be it on prem or cloud. PCs need to be joined and have access to shared folders on a server. Workgroup or Samba/SMB won't do it.



If you have Azure AD or Azure AD Domain Services (Azure AD DS) or [enter new branding name Microsoft cooks up yet again here], you're good to get up and running with EZ Audit.

It's as simple as creating a shared folder on the domain, and triggering an app at user logon via Group Policy, which can be handled via Intune.

Here is the Microsoft documentation for creating shares using AD DS


Here is the Microsoft documentation for Group Policy in an Azure Active Directory Domain Services managed domain

Needs noting: The Microsoft documentation for all things Azure is a massive sprawling monster with less than clear-cut "Here's how you do stuff". That would be too easy. So, the above are just a sampler and may not be the use-case for you. In the end, there are ways to replicate on-prem Domains, but it will vary based on your chosen Azure path.



Step 1


Create a folder and subfolder on a server all your users can access. Typically that would be your domain server, but it doesn't need to be.

Example: If user files are in the D: drive, create D:\ezaudit\audits. That would translate to \\servername\ezaudit\audits.

Share the folders to a Users Group all users belong to. Typically that would be Domain Users, but it doesn't have to be.

Give the folders Read, Write, Create, Delete, Modify, Execute permissions to your users.



Step 2


Next  run the EZ Audit Configuration tool from the Admin Console > Tools tab.

There you can enter what you want to audit and how often as well as where to save the audits.

Put the location you just created and shared, so: \\servername\ezaudit\audits as where to run the audits from.

Save the configuration to the \\servername\ezaudit\ folder.

The tool will move the audit module files to the location for you.

As an advanced topic for later, you can have multiple configuration files for different purposes, but for now, all you need is the one configuration file.



Step 3


Automate the audits.

There are two choices, and we'll start with the fastest and easiest to do (and, we hope not, but) undo.

Create a scheduled task for all users via Group Policy:

Fire up gpmc.msc (not gpedit.msc) and do the steps as shown below:

Right-click the selection as shown and select Edit:

Create scheduled task for all users step 1

Go to User Configuration > Preferences > Control Panel Settings > Scheduled Tasks.

Right-click Scheduled Tasks, select New and choose "Scheduled Tasks (at least Windows 7)"

Create scheduled task for all users step 2

 

Start creating the task as shown:

Create scheduled task for all users step 3

Set the Action the task will perform:

Create scheduled task for all users step 4

Create scheduled task for all users step 5



Click Apply and Ok out. 

Final note: You may want to remote into the server and do a GPUPDATE/FORCE at a command prompt to have it take immediate effect.


Copyright ©2024 ATCONSULTING LLC