Custom inventory rule for logged in user
I'm trying to create a custom inventory rule to display the contents of %LOCALAPPDATA%\Microsoft\Outlook. The problem that I am finding is that it is running as the KACE system process and doesn't display the correct information. Any ideas on this one?
Here is my command: ShellCommandTextReturn(cmd /c dir %LOCALAPPDATA%\Microsoft\Outlook)
1 Comment
[ + ] Show comment
-
CIR's run as system that is why you have problems getting the logged in users info - SMal.tmcc 8 years ago
Answers (4)
Please log in to answer
Posted by:
SMal.tmcc
8 years ago
Posted by:
flip1001
8 years ago
Try this for a CIR, but it will only work if a domain account is in session as far as I can tell.
ShellCommandTextReturn(cmd /q /c for /f "tokens=2 delims=\" %a in ('wmic computersystem get username') do for %A in (%a) do if exist "C:\Users\%A\AppData\Local\Microsoft\Outlook\." (dir "C:\Users\%A\AppData\Local\Microsoft\Outlook"))
Comments:
-
what does this do in this directory
do if exist "C:\Users\%A\AppData\Local\Microsoft\Outlook\
we use lotus notes in our company..any options like above you have mentioned to find the user details from lotus notes that is synced/stored locally in user profiles?
i want to find user info's from Lotus notes if it stores any details locally - rahimpal 7 years ago-
If the Outlook folder exists then the dir command is run to output the contents and some attributes of that folder.
I have no knowledge of Lotus Notes. - flip1001 7 years ago
Posted by:
chucksteel
8 years ago
I would recommend creating a script that detects the current logged in user and gathers the data you want then outputs it. You can then have your custom inventory rule run that script. This code will create a user variable for the current logged in user:
for /f "tokens=8" %%a in ('tasklist /v ^|find "explorer.exe"') do (
set "user=%%a")
One caution: If a machine runs an inventory update when a user isn't logged into a computer then this won't return any results and that would interfere with the collection of your data.
Posted by:
rockhead44
8 years ago
There is an extra \M in what you posted as your command. Is that a typo in your post or is that how you have the CIR?
Comments:
-
err thanks for pointing that out. It was just a typo in my post. - patackyc 8 years ago