TNI Audit delayed start

[mmatheny]

Is there any way to delay the start of tniaudit.exe, say for 5 or 10 minutes after a workstation is booted or logged in to? It just competes with everything else the system is doing right after a log on.

[Support]

Mike,

We have foreseen such situations and implemented the delay before actual scan start. When you export the audit tool, you have access to options window, and there is a setting (on the "Audit agent" page) to set such delay. It is 180 sec (3 min) by default.

If you already have the script deployed and running, just edit the file "tniaudit.ini" and set "scandelay" parameter to some desired value (in seconds), for example "scandelay=600" for 10 minutes.

[mmatheny]

I have it set for 600, and it still kicks off immediately. We have the tniaudit.exe on a shared folder and call it from there like this:

start \\servername\TNIDATA\tniaudit.exe /scripted

 

Will this have it use the tniaudit.ini file in the same location??

 

EDIT: well, it must because it is honoring the other parameters in that .ini file!

[mmatheny]

Doesn't work

[Support]

It must work. I've just set scandelay to 300, ran "tniaudit.exe /scripted" and the file appeared in exactly 5 minutes (with the scan time about 9 seconds).

The file "tniaudit.ini" must be present in the same directory as the exe file, and should start as follows:

[TNIAUDIT]

compressscandata=0

scandelay=300

... (etc)

If the ini file may be corrupted, you can delete it and regenerate it by running tniaudit.exe without parameters (like to scan the local PC). Then just change the "scandelay" and "savepath" parameters appropriately.

[mmatheny]

Here's my file - do the compressscandata and scandelay have to be the first two entries??

 

[TNIAUDIT]

scandelay=600

savepath=\\Achouston\TNIDATA\Data

defaultipoption=0

compressscandata=0

usedipaddress=

[inventory]

General information=1

Processor details=1

Motherboard details=1

System memory=1

###### system=1

Storage details=1

Multimedia details=1

Network adapters=1

Peripheral devices=1

Modems=1

Devices=1

OS information=1

Hotfixes=1

Installed software=1

Program files=1

Autorun applications=1

Database engines=1

Environment=1

Shared resources=1

Processes=1

Services=1

User accounts=1

Security=1

Win32_Product=0

[Support]

do the compressscandata and scandelay have to be the first two entries??

No, the order doesn't matter.

Make sure that "tniaudit.ini" is in the same directory as "tniaudit.exe", and that "tniaudit.exe" has the version 1.6.7.2750, otherwise update it.

[mmatheny]

OK - had older version of TNI installed - upgraded, will test - Thanx Zak!

[mmatheny]

OK - had older version of TNI installed - upgraded, will test - Thanx Zak!

Is there a way to only scan every x logons, or every x days, rather than EVERY logon?

[Support]

No, unfortunately it is not possible in the current version. We look forward to implement such possibility in the near future.