Logon script scan

This type of scan uses TNI’s Windows agent to automatically scan any Windows computer as it logs on to the domain. This is achieved by adding a specific command line (with a call to an exported agent executable) to the user’s domain logon script. Whenever the script is run, the agent is run on the remote asset as well. It generates a data file and places it into the specified directory. The resulting set of data files can then be imported to the TNI Storage either manually or automatically.

Setting up the logon script scanning

Go to Options and go to the Logon script page.

• Use the Export audit agent… button to place a copy of the Windows agent (tniwinagent.exe) into the shared folder of your choice. Make sure that the scanned assets have read rights to the folder you choose.
• Path to agent: contains the path to the agent’s executable. The final agent path should contain the tniwinagent.exe file.
• In the Save path field, specify a separate folder that will contain the data files generated by agents. This folder should be accessible from the remote assets for writing and, when using the /overwrite parameter, overwriting existing files.
• You can add a delay before the scan starts in order to prevent performance issues caused by the scan process starting simultaneously with autorun programs.
• Overwrite existing files: when enabled, the previous versions of data files will be replaced with the new ones when the assets are scanned repeatedly.

Any modification of the above parameters generates a command line for the logon script. You may copy the command and paste it into the logon script manually, or let the program do it for you by clicking the Add the command to a script button.

The results of a logon script scan are the same as those of a manual scan with the /noadmin flag. Scanning over SMB with the Scanner or using a resident agent is recommended if you need to collect more information.

A detailed step-by-step guide is available in the FAQ.

Automatically importing new data files

To automatically import the data generated by the logon script scan, create a scheduled Data import task in TNI and specify the path to the folder containing the data files (from the Save path field in Logon script settings) as a Data transfer method. This way, your Storage will always contain the most recent configuration information from each computer in your domain. See the Data import section to find out more about the automatic import feature and its parameters.