DumpSec Command line options

[Guest]

Hi,

Is there any way to run DumpSec from the command and only request two fields from a select type of report? And is there any way on the command line to have the util append the output report file? Command Example:

C:\DUMPSEC.EXE /computer=\\computer1 /rpt=userscol /saveas=csv /outfile=C:\Computer1.txt
C:\DUMPSEC.EXE /computer=\\computer2 /rpt=userscol /saveas=csv /outfile=C:\computer2.txt

I only want to output the fields "UserName" and "PswdRequired" and since I can only scan one computer at a time, thus the need for multiple command line entries in a bat file, I want to be able to append the file with computer name and field information.

Y-ASK

[This message has been edited by Y-ASK (edited 03-18-2005).]

[kstanush]

Re: DumpSec Command line options

No, there isn't any way to do this. You can do this with Exporter Pro, however, which now is part of Hyena:
http://www.systemtools.com/hyena

Exporter Pro lets you configure which output fields you want and has an option to append the data together. But in your case, you can just run it with the number of computers that you want to scan and it will put the data into the same file anyway.

If you want to use Exporter Pro and have questions, please let me know.

Thanks

[Guest]

Re: DumpSec Command line options

Ok, so now I'm working with Exporter Pro which came with Hyena that we just bought. Where do I find the field "pswdrequired" so that I export a report with that information? I've been successful with exporting certain user information from a couple of workstations but now I need to export the pswdrequired field like the one used in DumpSec.

Y-ASK

Ok I just checked and my Govt. Rep. has not purchased this yet so based on what information you tell me will determine whether we purchase or not. I'm sure I'm probably missing something but the "PswdRequired" field is the main driving force behind our purchase. Please let me know soonest.

Y-ASK

[This message has been edited by Y-ASK (edited 03-22-2005).]

[kstanush]

Re: DumpSec Command line options

For NT accounts, its in the field labeled "Account Flags". For AD accounts, its named "useraccountcontrol" under "User Attribute" categories.

Once added to the export, the resulting text will be shown as PASSWD_NOTREQD in the output. Note that this setting is for password NOT required, as this is what the Microsoft setting actually indicates and not the other way around.

[Guest]

Re: DumpSec Command line options

Why is the output so cluttered. I mean using DumpSec it was so neat and worked so great. This is what my file looks like:

Object_Path UserName AccountFlags
\\MIS-088 Administrator DONT_EXPIRE_PASSWD
\\MIS-088 ASPNET PASSWD_CANT_CHANGE^DONT_EXPIRE_PASSWD
\\MIS-088 Guest DISABLED^PASSWD_NOTREQD^PASSWD_CANT_CHANGE^DONT_EX PIRE_PASSWD
\\MIS-088 SecLog PASSWD_CANT_CHANGE^DONT_EXPIRE_PASSWD
\\mistst-wkst Administrator DONT_EXPIRE_PASSWD
\\mistst-wkst ASPNET PASSWD_CANT_CHANGE^DONT_EXPIRE_PASSWD
\\mistst-wkst Guest DISABLED^PASSWD_NOTREQD^PASSWD_CANT_CHANGE^DONT_EX PIRE_PASSWD


It is going to be pretty hard to go through 300 computer listings to see which computers have PswdRequired set on which accounts. Why is the free version report so much better than the paid version and what can I do to clean this up some. Also why can't I get the column output like in the GUI version of DumpSec. There I would have a listing of each account and a yes or no. With this I would have to comb through the entire document. Any suggetions?

Y-ASK

[kstanush]

Re: DumpSec Command line options

As they say, 'beauty is in the eye of the beholder'. Having flags for these fields would be great, but Microsoft did not design Windows that way. With NT, it was relatively easy to work around as NT had a limited number of fields for users, and DumpSec was based on that model.

But AD is database driven, and Hyena and Exporter Pro treat AD retrieval as such. To be consistent with the output with AD, NT data for user flags is also formatted that way.

If you want the data in the format used by DumpSec, then continue using it, just be aware that its no longer improved and supported as heavily as Hyena/Exporter Pro.

[Guest]

Re: DumpSec Command line options

<div class="ubbcode-block"><div class="ubbcode-header">Quote:</div><div class="ubbcode-body">Originally posted by Y-ASK:
<span style="font-weight: bold">Hi,

Is there any way to run DumpSec from the command and only request two fields from a select type of report? And is there any way on the command line to have the util append the output report file? Command Example:

C:\DUMPSEC.EXE /computer=\\computer1 /rpt=userscol /saveas=csv /outfile=C:\Computer1.txt
C:\DUMPSEC.EXE /computer=\\computer2 /rpt=userscol /saveas=csv /outfile=C:\computer2.txt

I only want to output the fields "UserName" and "PswdRequired" and since I can only scan one computer at a time, thus the need for multiple command line entries in a bat file, I want to be able to append the file with computer name and field information.

Y-ASK

[This message has been edited by Y-ASK (edited 03-18-2005).]</span></div></div>

=====================

To concatenate the reports, set up a host file containing names of computers (I'll call it host.txt and put it in root), and create a null c:\allcomputers.txt file, then:

for /f "delims=;" %%a in (c:\host.txt) do c:\dumpsec.exe /computer=\\%%a /rpt=usercol /saveas=csv /outfile=c:\%%a.txt & copy /a c:\allcomputers.txt + c:\%%a.txt c:\allcomputers.txt & del c:\%%a.txt

The above command is structured to run from a batch file. If running directly from a command line, then replace %%a with %a.

Can't help with filtering on columns from the command line, but you can import c:\allcomputers.txt into an Access database filtering out unneeded columns. Establish an Import Specification during the first import, and save the specification. Then after importing the file for the first time, create a macro to import the file using the import specification, and have the macro start immediately when the database is opened. Save the database to a directory, in your case root, with a name such as dumpsec_rpt.mdb or whatever your desire. To automate the entire process, add the following line to your batch file containing the for... command above:

c:\dumpsec_rpt.mdb

[Guest]

Re: DumpSec Command line options

Awesome! Thank you very much! I'll being trying this some time this week.

Y-ASK