Capturing system changes
Hi,
Is there a way to capture changes done to a Windows XP machine. I need to find out what file/registry changes are done on a desktop on a regular basis. Say I have a Windows XP workstation, I need to find out what are the changes a user(with admin access) is performing on the workstation.
Thanks,
Praveen
Is there a way to capture changes done to a Windows XP machine. I need to find out what file/registry changes are done on a desktop on a regular basis. Say I have a Windows XP workstation, I need to find out what are the changes a user(with admin access) is performing on the workstation.
Thanks,
Praveen
0 Comments
[ + ] Show comments
Answers (14)
Please log in to answer
Posted by:
anonymous_9363
16 years ago
Posted by:
nvdpraveen
16 years ago
Posted by:
anonymous_9363
16 years ago
How much more useful it would have been if you had stated this requirement at the outset :) If you had stated the need for such a tool to run as a service, then any response would have been tailored to that requirement. As it is, I don't know of any *snapshot* tool which works as you have specified. There are, however, any number of inventory-taking tools available. You could also use a WMI-driven script, the beauty here being that you can tailor scripts to suit your own requirements, plus there's no need to install a workstation service. Again, there are many examples available on the web. Try http://www.computerperformance.co.uk/ or http://cwashington.netreach.net as start points.
Posted by:
nvdpraveen
16 years ago
Posted by:
spartacus
16 years ago
1. Store the state of the machine (say A) in the morning, - any silent command line tool will do.
Posted by:
nvdpraveen
16 years ago
Posted by:
anonymous_9363
16 years ago
ORIGINAL: nvdpraveenSo now you're only interested in changes to the Desktop? Again, we're having to interpret your requirement, as I'm sure you *meant* to say that you want to save the workstation state.
A command line tool which saves the desktop state and provide an option to take a diff will do.
EXACTLY what is it you want to catch this guy doing? Installing non-supported or unlicensed software? Making system changes e.g. disabling anti-virus software? If you were able to tell us exactly what you want to monitor, maybe we could provide some help, although once again, I'm struggling to work out what on *earth* this has to do with 'Package Development'...
Posted by:
nvdpraveen
16 years ago
To explain the scenario.
I have a user who has 10 desktops. If he makes any configuration change to one of his machines (say he changes his start menu option, adds a new toolbar to an application) I need to replicate it to the remaining machines. The user will not be telling us where he changed a particular setting. Based on the system snapshot/diff I need to judge and push the settings to remaining machines. Hope it's clear.
I have a user who has 10 desktops. If he makes any configuration change to one of his machines (say he changes his start menu option, adds a new toolbar to an application) I need to replicate it to the remaining machines. The user will not be telling us where he changed a particular setting. Based on the system snapshot/diff I need to judge and push the settings to remaining machines. Hope it's clear.
Posted by:
anonymous_9363
16 years ago
These desktops...are they in VMs, by any chance? Anything user-based e.g. shortcuts, stuff in HKCU etc we can ignore, as the user profile ought to take care of that. For the VMs, you could clone the 'base' disk and then create clones from that: there's a setting in VMWare Workstation to have changes in a base disk cascaded to its clones. If we're not talking VMs, what are these Desktops contained in?
Posted by:
nvdpraveen
16 years ago
Posted by:
anonymous_9363
16 years ago
(sigh...) So, actually, you mean he has 10 MACHINES, separate MACHINES, not Desktops. I imagined he was using virtual machines e.g. VMWare or Virtual PC, or that they were separate Desktops, such as some graphics card vendors supply.
I don't know what to suggest here. I guess you could use Briefcase (as it's free, supplied with XP) but I think that requires manual intervention to start it. Oh, BTW, what does this have do with Package Development? This really isn't the correct forum for this discussion. I'd suggest somewhere like the fora at Windows IT Pro or a MS newsgroup...?
I don't know what to suggest here. I guess you could use Briefcase (as it's free, supplied with XP) but I think that requires manual intervention to start it. Oh, BTW, what does this have do with Package Development? This really isn't the correct forum for this discussion. I'd suggest somewhere like the fora at Windows IT Pro or a MS newsgroup...?
Posted by:
India_Repackaging
16 years ago
Posted by:
nvdpraveen
16 years ago
Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
so that the conversation will remain readable.