Symantec Management Platform (Notification Server)

 View Only

  • 1.  Hardware Inventory Scan - USB Storage Devices

    Posted Jul 24, 2011 09:19 PM

    Hey guys,

    Will the NS Hardware Scan report attached USB storage devices only if they are attached when the scan runs?

    Or will it report a history of all the USB storage devices that have been attached to the computer?

    I'm looking at the vHWUSBDevice view - NS7.0 SP4

    Cheers

    Rhys



  • 2.  RE: Hardware Inventory Scan - USB Storage Devices

    Posted Jul 24, 2011 10:02 PM

    ... it appears that it only records devices attached at the time of the scan, whether I run a full or delta scan.

    Damn.

    Does anyone have any suggestions as how to obtain a historical list of USB devices that have been attached to a machine? I know we tested a product for something else and it was able to report all the devices that had ever been attached to the machine (so I guess that information is stored somewhere).

    Custom inventory maybe?

    Cheers,

    Rhys

    edit: it appears as if this history is all stored here: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USBSTOR\

    Might try get this with custom inventory.



  • 3.  RE: Hardware Inventory Scan - USB Storage Devices

    Posted Jul 24, 2011 10:52 PM

    Definitely should work with a custom inventory scan.. nice find, I'm going to use this one myself! 

     

    thanks!



  • 4.  RE: Hardware Inventory Scan - USB Storage Devices

    Posted Jul 24, 2011 11:09 PM

    in the Symantec console, it just requires more database space. I would find the specific tables you want to track, and go from there. But your find and approach are good, and sound like more fun.



  • 5.  RE: Hardware Inventory Scan - USB Storage Devices
    Best Answer

    Posted Jul 25, 2011 09:58 PM
      |   view attached

    It could probably be a bit neater/smarter, but it does work.

     To use this, create a new custom data class with three rows.

    One for Class, Friendly Name and the Hardware ID. I just made them all 255 sized strings that are not keys and don't require data.

    Get the GUID of the data class and replace my one in the attached script.

    Then just run it! 

    (p.s, thanks for that info jharings)

    I query the data like such:

     SELECT  usb.[Class],
         usb.[FriendlyName],
         usb.[HardwareID],
         vc.[Name] AS 'Workstation',
         vc.[User] AS 'Primary User'

-- Change this table with the one you created in the custom data class
FROM Inv_Historical_USB_Storage_Devices usb

JOIN vComputer vc

ON usb.[_ResourceGuid] = vc.[Guid]

WHERE usb.[HardwareID] ! = ''

ORDER BY usb.[FriendlyName]

    edit: make sure your custom data class has the 'allow multiple rows from a single computer resource' checkbox ticked

    Attachment(s)

    zip
    HistoricalUSBDevicesCustomInventory.zip   1 KB 1 version