Many thanks for the replies,

For the purpose of learning form your experience could you guys look over this script and let me know if there’s a better way of doing things?

;--------------------------------------------------------------------
; Local Admin Audit
;--------------------------------------------------------------------
;Title
;
? "Local Admin Audit #3 "
;-----------------------------------------------
;Declaring Variables.
;
DIM $lgroup, $admin, $output

;-----------------------------------------------
;Cheack if PC has aready Audited

? "Checking Registry key..."

If ReadValue ("HKEY_CURRENT_USER\Software\kix","AuditLog3")
"- PC aready Audited!"
exit
endif

;-----------------------------------------------
;Win2k/XP Audit

IF (@PRODUCTTYPE = "Windows 2000 Professional")
or (@PRODUCTTYPE= "Windows XP Professional")

? "Starting @PRODUCTTYPE Audit"

$admin=ingroup('@wksta\'+sidtoname('S-1-5-32-544'))

If $admin="1"
$output="Administrator"
Else
$output="User"
EndIf


? "Creating Audit Logs"

IF Open( 3 , "\\zeus\kixlog$\LOG3_$output.TXT" , 5 ) = 0
$x = WriteLine( 3 , "____________________________________________________ " + @CRLF)
$x = WriteLine( 3 , "Logged on " + @DATE)
$x = WriteLine( 3 , " at " + @TIME + @CRLF)
$x = WriteLine( 3 , "Username - " + @USERID + @CRLF)
$x = WriteLine( 3 , "Workstation - " + @WKSTA + @CRLF)
$x = WriteLine( 3 , "Local Group Membership - " + $output + @CRLF)
$x = WriteLine( 3 , "Kix Version - " + @KIX + @CRLF)
endif

If Open( 4 , "\\zeus\kixlog$\EXCEL3_$output.TXT" , 5 ) = 0
$x = WriteLine( 4 , "," + @CRLF)
$x = WriteLine( 4 , "," + @DATE)
$x = WriteLine( 4 , "," + @TIME)
$x = WriteLine( 4 , "," + @USERID)
$x = WriteLine( 4 , "," + @WKSTA)
$x = WriteLine( 4 , "," + $output + @CRLF)
$x = WriteLine( 4 , "," + @KIX + @CRLF)
endif

;-----------------------------------------------
;Setting Audited flag

? "Creating Registry Keys "
WriteValue("HKEY_CURRENT_USER\Software\kix","AuditLog3","1","REG_SZ")
? "Audit complete"
exit

endif
;-----------------------------------------------
;Win98 Audit

IF (@PRODUCTTYPE = "Windows 98")

? "Starting @PRODUCTTYPE Audit"

If Not ReadValue("HKEY_CURRENT_USER\Software\kix","AuditLog3")
IF Open( 5 , "\\zeus\kixlog$\LOG3_Win98.TXT" , 5 ) = 0
$x = WriteLine( 5 , "____________________________________________________ " + @CRLF)
$x = WriteLine( 5 , "Logged on ," + @DATE + @CRLF)
$x = WriteLine( 5 , "Username ," + @USERID + @CRLF)
$x = WriteLine( 5 , "Workstation ," + @WKSTA + @CRLF)
$x = WriteLine( 5 , "OS ," + @PRODUCTTYPE + @CRLF)
$x = WriteLine( 5 , "Kix Version" + @KIX + @CRLF)
endif

;-----------------------------------------------
;Setting Audited flag

? "Creating Registry Keys "
WriteValue("HKEY_CURRENT_USER\Software\kix","AuditLog3","1","REG_SZ")
? "Audit complete"
exit

endif

;--------------------------------------------------------------------
; END OF Local Admin Audit Script
;--------------------------------------------------------------------

Edited by clementp1 (2005-09-29 10:10 AM)