I am investigating about implementing NAQC for our RRAS server and
connecting clients. I would like to run a script to verify the below:
1) Client hostname check. We use a standard prefix for our client machines
so we would require the prefix portion of the computername to be verified.
example: N-%username%, D-%username%. In this example we would want the
script to check to confirm that the computername starts with either the "N-"
or "D-" prefix.
2) Registry key check. We have a predefined registry key set to represent
the build version of our internally used operating systems. In addition to
check 1 above we would like to check the registry to ensure the key value is
present on the client PC. There are several build numbers so the client
would need to match these set values.
3) Possibly check for AV client version (SAV) and definitions.
Has anyone implemented a similar setup that can point me in the right
direction for scripting examples?
A couple more questions if I may:
1. if I were to eventually implement this users connecting to our RRAS
server via the CMAK created connectoid would have the script run to check
for the specified items. However, what is to stop a user from connecting
manually by creating their own connection and not using the custom made
connectoid which runs the script?
2. It seems the script can be either .bat or .vbs but does it matter if the
script is enrypted vbs?
Appreciate any feedback/advice. Many thanks.
|