AccessChk v5.1 Available!
Log In or Register to download the BES file, and more.

0 Votes

Description

As a part of ensuring that they've created a secure environment Windows administrators often need to know what kind of accesses specific users or groups have to resources including files, directories, Registry keys, global objects and Windows services. AccessChk quickly answers these questions with an intuitive interface and output.

Property Details

ID1371
TitleAccessChk v5.1 Available!
DomainBESC
CategoryInstall
Download Size280214
Sourcedanielheth@bigfix.me
Source ID<Unspecified>
Source Severity<Unspecified>
Source Release Date1/10/2013 12:00:00 AM
KeywordsAccessChk Registry Install ensuring they
Is TaskTrue
Added by on 1/10/2013 12:22:04 PM
Last Modified by on 1/10/2013 12:22:04 PM
Counters 5096 Views / 8 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Relevance

isWindows (Relevance 274)
Used in 591 fixlets and 3 analyses   * Results in a true/false
Show indented relevance
name of operating system starts with "Win"
Used in 1 fixlet   * Results in a true/false
Show indented relevance
not exists file "AccessChk.exe" of windows folder

Actions

Action 1 (default)

Action Link Click here to initiate the deployment process.
Script Type BigFix Action Script
action parameter query "EULA" with description "Click OK if you agree to the SysInternals EULA (see http://technet.microsoft.com/en-us/sysinternals/bb664922) on behalf of the System Account on the endpoint(s)." and with default value "I AGREE"
continue if {parameter "EULA" = "I AGREE"}
prefetch AccessChk.zip sha1:8b9845d28c4bec0824463e2518972eb6ecbd4712 size:112278 http://download.sysinternals.com/files/AccessChk.zip
prefetch unzip.exe sha1:e1652b058195db3f5f754b7ab430652ae04a50b8 size:167936 http://software.bigfix.com/download/redist/unzip-5.52.exe
utility __Download\unzip.exe
waithidden __Download\unzip.exe -qq -o -d "{pathname of client folder of current site}\__Download" __Download\AccessChk.zip
copy "{pathname of client folder of current site}\__Download\AccessChk.exe" "{pathname of windows folder}\AccessChk.exe"
continue if {version of file "AccessChk.exe" of windows folder = "5.10.0.0"}
//Set EULA agreement flags
regset "[HKEY_CURRENT_USER\Software\Sysinternals\AccessChk]" "EulaAccepted"=dword:00000001
Success Criteria

This action will be considered successful when the applicability relevance evaluates to false.

Action 2

Action Link Click here to learn about Peter Hahndorf's research into accepting Sysinternals Licenses.
Script Type URL
http://peter.hahndorf.eu/blog/2010/03/07/WorkAroundSysinternalsLicensePopups.aspx
    

Action 3

Action Link Click here to learn more about this application.
Script Type URL
http://technet.microsoft.com/en-us/sysinternals/bb664922
    

Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!
danielheth -
Accepting the EULA within the task accepts it on behalf of the SYSTEM user, the context that the BESClient runs as. If, after running this, a user sits down and tries to run the exe, they will be presented with the EULA to accept before it runs. I added the EULA part for current user so you can come back later and use this utility in another task without being harassed with a screen you can not see, and being left wondering what's wrong.
jgstew -
I wonder if sysinternals will look in HKLM for the EulaAccepted instead of just HKCU. I'd like to test this at some point.