tdevropa-test

Printer Audit - Windows
Log In or Register to download the BES file, and more.

1 Votes

Versioning - This is the latest version.

1Printer Audit - Windows10/16/2014 2:28:18 PM
2Printer Audit - Windows10/17/2014 7:54:17 AM


Property Details

ID2994742
StatusAlpha - Code that was just developed
TitlePrinter Audit - Windows
DomainBESC
Added by on 10/17/2014 7:54:17 AM
Last Modified by on 10/17/2014 7:54:17 AM
Counters 3394 Views / 82 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 1 rating. ** Log In or Register to add your rating.

Properties

# Local Printers
Period 12 hours
* Results in a true/false
Show indented relevance
number of keys whose (value "Port" of it as string contains "LPT" OR value "Port" of it as string contains "DOT4" OR value "Port" of it as string contains "USB") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers" of registry as string
# IP Address Network Printers
Period 12 hours
* Results in a true/false
Show indented relevance
number of keys whose (4 = number of substrings separated by "." of (value "Port" of it as string)) of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers" of registry as string
Printers
Period 12 hours
* Results in a true/false
Show indented relevance
concatenation ", " of unique values of names whose(it as string does not contain "Microsoft" AND it as string does not contain "PDF" AND it as string as lowercase does not contain "fax" AND it as string does not contain "OneNote" AND it as string does not contain "PaperPort") of keys of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers" of registry
Printer Models
Period 12 hours
* Results in a true/false
Show indented relevance
concatenation ", " of unique values of (values "Model" whose(it as string does not contain "Microsoft" AND it as string does not contain "PDF" AND it as string as lowercase does not contain "fax" AND it as string does not contain "OneNote" AND it as string does not contain "PaperPort") of keys of keys of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers" of registry as string)
Default Printers
Period 12 hours
* Results in a true/false
Show indented relevance
concatenation ", " of (unique values whose(it as string does not contain "Microsoft" AND it as string does not contain "PDF" AND it as string as lowercase does not contain "fax" AND it as string does not contain "OneNote" AND it as string does not contain "PaperPort") of preceding texts of firsts "," of ((values "Device" of keys "windows" whose ( exists values "Device" of it ) of keys "Software\Microsoft\Windows NT\CurrentVersion" of keys of key "HKEY_USERS" of registry) as string) as string)
Printer Info from WMI
Period 12 hours
* Results in a true/false
Show indented relevance
selects "Name,Caption,DeviceID,DriverName,PortName from win32_printer" of wmi
Printer Names from WMI (filtered)
Period 12 hours
* Results in a true/false
Show indented relevance
unique values whose(not exists (it as lowercase) whose(it = "fax" OR it contains "webex " OR it contains " converter" OR it contains " virtual printer" OR it contains " publisher imagesetter" OR it contains " onenote " OR it contains "microsoft " OR it contains "pdf")) of string values of selects "Name,Caption,DeviceID,DriverName from win32_printer" of wmi
Printer Info from ActiveDevices
Period 12 hours
* Results in a true/false
Show indented relevance
(friendly name of it | "<noFriName>", description of it | "<noDesc>", manufacturer of it | "<noManuf>", location information of it | "<noLocInfo>" ) of active devices whose(class of it = "PrintQueue" OR class of it = "Printer")
DoNotInstallCompatibleDriverFromWindowsUpdate (win7+)
Period 12 hours
* Results in a true/false
Show indented relevance
values "DoNotInstallCompatibleDriverFromWindowsUpdate" of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print" of native registry
PrinterNames of ControlSet (registry)
Period 12 hours
* Results in a true/false
Show indented relevance
unique values of names of keys of keys "Control\Print\Printers" of keys whose(name of it contains "ControlSet") of keys "HKEY_LOCAL_MACHINE\SYSTEM" of native registry
PrinterDrivers of ControlSet (registry)
Period 12 hours
* Results in a true/false
Show indented relevance
unique values of names of keys of keys whose(name of it starts with "Version-") of keys "Drivers" of keys of keys "Control\Print\Environments" of keys whose(name of it contains "ControlSet") of keys "HKEY_LOCAL_MACHINE\SYSTEM" of native registry
Names of (PrinterDrivers & PrinterNames) combined&filtered
Period 12 hours
* Results in a true/false
Show indented relevance
unique values whose(not exists (it as lowercase) whose(it = "fax" OR it contains "root print " OR it contains "remote desktop " OR it contains "webex " OR it contains " converter" OR it contains " virtual printer" OR it contains " publisher imagesetter" OR it contains " onenote " OR it contains "microsoft " OR it contains "pdf")) of ( (string values of selects "Name,Caption,DeviceID,DriverName from win32_printer" of wmi);( names of keys of keys "Control\Print\Printers" of keys whose(name of it contains "ControlSet") of keys "HKEY_LOCAL_MACHINE\SYSTEM" of native registry );( names of keys of keys whose(name of it starts with "Version-") of keys "Drivers" of keys of keys "Control\Print\Environments" of keys whose(name of it contains "ControlSet") of keys "HKEY_LOCAL_MACHINE\SYSTEM" of native registry );(values "Model" of keys of keys of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Printers" of registry as string);(( if (exists friendly name of it) then (friendly names of it) else (descriptions of it) ) of active devices whose(class of it = "PrintQueue" OR class of it = "Printer")) )

Relevance

isWindows (Relevance 1172)
Used in 1067 fixlets and 522 analyses * Results in a true/false
Show indented relevance
windows of operating system


Comments

Log In or Register to leave comments!
vijay.pratapa -
Thank you. was looking for this.

Recommended Articles

bigfix vs sccm hp universal print driver for windows postscript microsoft visual studio 2010 tools for office runtime download hkey_local_machine system currentcontrolset services lanmanserver parameters sccm health check download jre 6 64 bit microsoft system clr types what is abbyy finereader 6.0 sprint intel vpro download microsoft report viewer 2008 redistributable utc to pakistan standard time hp universal pcl 6 driver uninstall microsoft sql server