AP Audit R9a

@@__________________________________________________________________________
@@
___
____
___
___ __
_____
_
__
@@
/ | / __ \ / | __ ______/ (_) /_ / ___/__________(_)___ / /_
@@ / /| | / /_/ / / /| |/ / / / __ / / __/ \__ \/ ___/ ___/ / __ \/ __/
@@ / ___ |/ ____/ / ___ / /_/ / /_/ / / /_ ___/ / /__/ / / / /_/ / /_
@@ /_/ |_/_/
/_/ |_\__,_/\__,_/_/\__/ /____/\___/_/ /_/ .___/\__/
@@
/_/
@@__________________________________________________________________________
@@
@@ NAME
@@ AP Audit Script
@@
@@ PRODUCT
@@ AUSBIN, CXC 137 1120/4
@@
@@ Copyright Ericsson AB 2009.
@@ All rights reserved.
@@
@@ The Copyright to the computer program(s) herein
@@ is the property of Ericsson AB, Sweden.
@@ The program(s) may be used and/or copied only with
@@ the written permission from Ericsson AB or in
@@ accordance with the terms and conditions stipulated in the
@@ agreement/contract under which the program(s) have been
@@ supplied.
@@
@@ DESCRIPTION
@@ This winfiol script will generate log files to be analyzed
@@ offline by ALAN, CXC 137 1124/4
@@
@@ This winfiol script is to be used with WinFIOL 6.4 or later.
@@ It is recommended for the user to use WinFIOL 7.1 SP2
@@ Note : WinFIOL 7.1 SP2 echo commands correctly while using SSH (HI80445)
@@
@@
@@ AUTHOR
@@ 2005-12-19 by EAB/UZ/ZS UABHAKM
@@
@@ REV DATE
NAME
DESCRIPTION
@@ R1A 20051219 UABHAKM First revision, complies to CXC 137 1120/4 R1A
@@ R2A 20060215 UABHAKM Second revision, complies to CXC 137 1120/4 R2A
@@
Tr's solved:
@@
HG56987
@@
HG57835
@@
HG57839
@@ R3A 20060407 UABHAKM Third revision, complies to CXC 137 1120/4 R3A
@@
HG70665
@@
HG70690
@@
HG66302
@@
HG72032
@@
HG69453
@@
HG58613
@@ R3B 20060411 UABHAKM Fourth revision, complies to CXC 137 1120/4 R3B
@@ R4A 20060622 UABHAKM Fifth revision, complies to CXC 137 1120/4 R4A
@@ R4B 20060704 ESEFRSV Sixth revision, complies to CXC 137 1120/4 R4B
@@ R4C 20060821 UABHAKM Seventh revision, complies to CXC 137 1120/4 R4C
@@ R5A 20060926 UABHAKM Eight revision, complies to CXC 137 1120/4 R5A
@@
HH29261
@@
HH24770
@@
HH28381
@@ R5B 20061221 UABHAKM Ninth revision, complies to CXC 137 1120/4 R5B
@@ R5C 20070308 UABHAKM Tenth revision, complies to CXC 137 1120/4 R5C
@@ R6A 20070906 UABHAKM Eleventh revision, complies to CXC 137 1120/4 R6A
@@ R6B 20071207 UABHAKM Twelth revision, complies to CXC 137 1120/4 R6B
@@ R6C 20081008 EFRAZOL Thirteenth revision, complies to CXC 137 1120/4 R6C
@@ R6D 20081128 XMADTHA Fourteenth revision, complies to CXC 137 1120/4 R6D
@@ R6E 20090123 XMADTHA Fifteenth revision, complies to CXC 137 1120/4 R6E
@@ R6F 20090227 XMADTHA Sixteenth revision, complies to CXC 137 1120/4 R6F
@@ R7A 20090403 XCSSUJV
Seventeenth revision, complies to CXC 137 1120/
4 R7A
@@ R7B 20090709 XMADTHA
Eighteenth revision, complies to CXC 137 1120/4
R7B
@@ R7C 20091001 XSIVAAR
Nineteenth revision, complies to CXC 137 1120/4
R7C
@@ R7D 20100406 XLAVAMR
Twentieth revision, complies to CXC 137 1120/4
R7D
@@ R7E 20100930 XCHAKRI Twenty First revision,complies to CXC 137 1120/4 R7
E
@@ R7F 20110160 XCHAKRI Twenty Second revision,complies to CXC 137 1120/4 R
7F
@@ R8A 20110615 XCHAKRI Twenty Third revision,complies to CXC 137 1120/4 R8
A
@@ R8B 20110825 XCHAKRI Twenty Fourth revision,complies to CXC 137 1120/4 R
8B
@@ R8C 20111014 XCHAKRI Twenty Fifth revision,complies to CXC 137 1120/4 R8
C
@@ R8D 20111104 XCHAKRI Twenty Sixth revision,complies to CXC 137 1120/4 R8
D
@@ R9A 20120311 XCHAKRI Twenty Seventh revision,complies to CXC 137 1120/4
R9A
@@
@@ SEE ALSO
@@ ALANBIN, CXC 137 1124/4 @@
@@-------------------------------------------------------------------------@@File: AP_Audit_R9A.txt
@@Supported
@@
sw levels: APZ 11.1, 11.2, 11.3, 12.0, 13.0, 15.0,16.0 and APG40 One
Track up to AGM020
@@
hw levels: APG40 C/1, APG40 C/2, APG40 C/4 and APG43
@@
@@Script used with WinFIOL 6.4 or later.
@@Script plug-in must be loaded.
@@To check:
@@Help->Status Information->Plug-ins
@@'Script plug-in' must be present in the list.
@@
@@This winfiol script creates Audit logs to be reviewed offline with ALAN-tool a
nd/or manual.
@@
@@Log in to A-node and transmit/send this file
@@
@@Log in to B-node and transmit/send this file
@@
@@
@@ Note: The Logfile name is automatically set to
@@
C:\Temp\AP_Audit_R9A_"hostname"_"nodestate_"osversion"_"date"_"time".lo
g
@@
@@
@@20040430
Rev.A First version
@@20041119
Rev.B Second version
@@20050430
Rev.C Third version
@@
Extended ACL checks
@@
LBB hotfixes checked
@@
Antivirus exclusion lists collected
@@
DPHIP (CP hardware versions)
@@
Ipna osdumps collected
@@
Commondll and dll logs collected
@@
Extended collection of mcs fms aes configuration data
@@20050909
Rev.D Fourth version
@@
MML commands only executed in Active node and only on AP
-1
@@
Improvements for dual ap configuration
@@
Improvements for APZ 212 40
@@
Commands only possible in Active node not executed in Pa
ssive node
@@
Adaption for APZ 12.0
@@
ACL checks according to Baseline
@@
More efficient "comment out" syntax used (@@)
@@
IPN-2 and -3 also checked
@@
DIRCP; CP Event Record collected
@@
Examples for net start and net share changed
@@
APMSP;CHOIP;CHOPP; To check charging configuration on th
e APZ-side
@@
Cluster /ver and /list
@@
Alarm panel configuration
@@
Rdt/ohs configuration
@@
Tree information
@@
Application-,System-logs only 100 last events printed
@@
Printing of sfc-, fch- and dr.watson logs are disabled
@@
Please use mktr (or enable by remove @@) if they are req
uested
@@
Commondll.log, dll.log and IPN osdumps are commented out
@@
Date /t&time /t&mml CACLP:ALL; are sent together (to che
ck CP/AP time deviation)
@@
Timezone information
@@
ISP statistics
@@
Automatic naming of the logfile
@@20051021
Rev.E Fifth version
@@
Userdump (needed for OSU)
@@
fcc_amversion added for WinS03
@@
Version check of Pragma telnet server
@@
Check for incorrectly installed files
@@
WinS03: Print all services
@@
Check automatically started applications
@@
New partitions in cacls for WinS03
@@
Osversion added to logfile name
@@20051110
Rev.F Sixth version
@@
OSU: To check that no empty user variable PATH exist.
@@
OSU: To check that no occurrences of <Account Domain not
found> exist.
@@
OSU: No "big" ddi files should exist (Normal size ~50KBy
te).
@@
OSU: Make sure that Administrator doesn't have membershi
p in
@@
groups 'Guests' and 'Domain Guests'.
@@
OSU: Check required free disk space.
@@
aehevls removed. Can cause APZ21240 cp fault caused by h
igh cpu load.
@@20051219
AUSBIN CXC1371120/4 R1A only some text differs to Rev.F
@@20060215
AUSBIN CXC1371120/4 R2A
@@
ipnaadm -list also printed for AP-2.
@@
dbols -l included.
@@
cpfdf cpfls -l afpls -l cdhdsls -l cdhls -l dbols -l als
o printed on AP-2.
@@
mdutil removed for WinS03.
@@
<Account Domain not found> check improved. (quicker)
@@
dhcp config printing changed for WinS03.
@@
OSU: Check if Display of Legal Notice is active.
@@
OSU: Check that both node names are in uppercase.
@@
OSU: Check that ossuser account never expires.
@@
lmhosts example corrected.
@@
Example for Excluded from AVIR updated.
@@
Example for set changed.
@@
OSU: "Default FTP Site" has to be "C:\Inetsrv\ftproot".
@@
OSU: To check that no other user than Default is defined
in the Pragma Telnet Server.
@@20060407
@@
New for APG40/C4: ScsiDisk and megarc.
@@
Check the alog status.
@@
Added example for e:\boot.ini WinS03.
@@
OSU: Check for file c:\winnt\backup.fts (HG66302).
@@
OSU: Attributes and files on e: partition printed.
@@
OSU: Check permissions on E: partition (HG70665).
@@
OSU: Check for missing files (HG72032).
@@
OSU: Check correct labels (HG69453 and HG58613).
@@20060411
AUSBIN CXC1371120/4 R3B
@@
Minor corrections for ipn print on passive node, Backup.
fts and boot.ini example.
@@20060622
@@
FOR command removed on request from BSC-OSS.
@@
Check content of hosts and compare them between A and B
node.
@@
Print MAXSIZE of the eventlogs.
@@
Installation date/time printed for the security patches
(TR HG72875).
@@
Check if the repair fix 109 22-APZ 212 30/4-494 was corr
ect installed.
@@
Check for directories that should be files on C:\ (TR HG
72032).
@@
DHCP: To check that no directory called "old" exist.
@@
DHCP: To check that no corrupted dir's exist. (e.g. <DIR
> j500000D.log).
@@
DHCP: checkdb.
@@
winmsdreport printed for WinS03.
@@
Check that SSH installation is correct (SCS534984).
@@
DNS Server configuration.
@@
OSU: Check required free disk space on E: 19 MByte (TR H
G87416).
@@20060704
AUSBIN FTP virtual directories printed on passive node.
@@20060821
AUSBIN CXC1371120/4 R4C minor corrections.
@@20060926
@@
Ping the other node over the public interface.
@@
Check of replication and USN.
@@
Setupservice.def is printed.
@@
Check lct configuration of the service account.
@@
Listing of ddi files for WinS03.
@@
Check anonymous logon setting for the FTP Sites (TR HH29
261).
@@
Preferred owners are checked for the cluster groups (TR
HH24770).
@@
@@20061220
AUSBIN
@@
@@
supported).
@@
@@
@@
@@
@@
@@
@@
@@20070308
AUSBIN
@@
.
@@
@@
@@
@@
@@
ds (HH71860)
@@20070906
AUSBIN
@@
@@
@@
@@
@@
@@
@@
updated.
@@
erface.
@@
@@
@@
@@
@@
@@
@@
@@20071210
AUSBIN
@@
@@
both nodes.
@@
@@
(classic and also APZ
@@
\ drive.
@@
@@
both nodes.
@@
@@
@@
@@
@@
@@20081008
AUSBIN
@@
@@
OSU: Check input language setting (TR HH28381).

CXC1371120/4 R5B
EXCHANGE IDENTITY DATA, IOEXP.
Adaption to run on APG43 (note: APG43 is not officially
Status of insecure protocols (csadm).
date and time added to the logfile name.
Check FTP Sites settings.
netstat -s to get network statistics
Total script execution time printed.
bupls/bupidls/sybrp/lamip
tree C:\ /A
CXC1371120/4 R5C
bugfix for totaltime calculation and cacls on data disks
Changes for ap2 at bupls and repadmin.
Extended Active Directory Check.
Volume check in WinS03 changed, wmic.
Check the registered IE version.
audit error for second APG -- wrongly included CP comman
CXC1371120/4 R6A
APG43 supported
cluster net /prop | sort | find "Role"
The Baseline config file, IntegrityAP.dir is printed.
dir /od c:\bur dir /od C:\acs\data\BUR
attrib E:\* /S /D
NIC speed and duplex.
Check for directories that should be files (TR HG72032)
DNS should not be configured to listen on the Public int
ISP log maximum size
@EXIT used instead of @END to end this script.
folders/files in C:\acs\data\FCH\current\ are listed.
print acl's for responding ftp dir's.
Check for isperror.log dir C:\acs\logs\prc.
Extended FRS and gp Check
SCSIDISK and megarc additions for C/4
CXC1371120/4 R6B
afpls -a for all defined transferqueues.
Check that clustername and cluster ip-address works from
Check setting of RAID remirroring speed.
Updated text: "IgnoreBroadcastFlag 0x1" all other APZ's
212 50/55)
Check that $oem$ doesn't exist on the root catalog on C:
OSU: SearchList must be empty before starting OSU.
Check that clustername and cluster ip-address works from
stmdbrt -p Database Retainment Time Print
exalls -f the path and filename for EXAL listed.
alogexls List all items that are excluded from alog.
cpdlist EOL & EOP is listed.
cluster res "{clusterResource}" /listowners
CXC1371120/4 R6C
netsh dhcp server show serverstatus added.
Check if burbackup archive exists on datadisk for WinS03
.
@@
Jump over certain code if Winfiol 7.0 or older is used
@@
(7.0 SP1 and newer is OK).
@@
Check for number of network interfaces in registry.
@@
Change the path of logfile.
@@20081128
AUSBIN CXC1371120/4 R6D
@@
Corrected typoerror in "which dnscmd.exe".
@@20090123
AUSBIN CXC1371120/4 R6E
@@
net time \\192.168.202.1 && net time \\192.168.202.2 add
ed (HJ92696)
@@
gpupdate /force added (HJ99663)
@@
eventquery /L application /V /FO list /R 1 /FI "Source e
q SceCli" added (HJ99663)
@@
diskeeper /p /jt=z added (HJ99663)
@@
SCSIDISK /CS ,megarc commands,gamevelog for C/4 added (H
J99663)
@@
Corrected typoerror in "cacls S:\STS\Data\*"
@@20090227
AUSBIN CXC1371120/4 R6F
@@
Revised check for CA ANTIVIRUS VER 8.1 (AVIRBIN CXC 137
1268/4 R1A)
@@20090403
@@
Adaption to run on APG43 Blade C
luster (HK34818)
@@
Inclusion of WinS2003 Quorum Dis
k (HK57350)
@@20090709
AUSBIN CXC1371120/4 R7B
@@
regedit /e Keyb.txt "HKEY_Users\
" changed to reg query "HKU" /s /f "Preload" >Keyb.txt (HK23886)
@@
dir \\{int_a}\c$\winnt\sysvol\do
main\Policies\gptTmpl.inf /s/b and
@@
dir \\{int_b}\c$\winnt\s
ysvol\domain\Policies\gptTmpl.inf /s/b added. (HK24490)
@@
dsquery computer -stalepwd 29 ad
ded. (HK29936)
@@
WinFIOL version printed. (HK2994
3)
@@
phaprint commands combined with
single command. (HK35345)
@@
TFTP server commands added for check
ing TFTP performance. (HK35616)
@@
reg query "HKEY_LOCAL_MACHINE\SY
STEM\CurrentControlSet\Services\Tcpip\Parameters" /v ReservedPorts. (HK38154)
@@
Corrected the Extended FRS check rou
tine and so Extended Active Directory check is done always. (HK46884)
@@
gpresult /z added. (HK51693)
@@
@@20091001
AUSBIN
CXC1371120/4 R7C
@@
Extended DHCP Server check for A
P2 machines (HK70097)
@@
Updated WinFIOL version print st
atement. (HK87590)
@@
Extended GPO policy checks for A
P2 configuration (HK89797)
@@
nels added for checking the Blad
e Cluster Configuration. (HK91440)
@@20100406
AUSBIN
CXC1371120/4 R7D
@@
Introduced COMPUTERNAME instead
of IPNs (HL66537)
@@
dir "C:\WINNT\Installer" | finds
tr "2015A3F9-5EED-4C67-BD3A-FF024A40C22D" added(HL41602)
@@
type \\{NODEA}\C$\acs\data\FCR\v
erbosity and type \\{NODEB}\C$\acs\data\FCR\verbosity added. (HL41506)
@@
reg query \\{NODEA}\HKLM\System\CurrentControlSe
t\Control\TimeZoneInformation
@@
reg query \\{NODEB}\HKLM
\System\CurrentControlSet\Control\TimeZoneInformation added. (HL60686)
@@
Additional raidutil commands are
added. (HL41654)
@@20100929
AUSBIN
CXC1371120/4 R7E
@@
Introduced the command for AP nu
mber (HL97608)
@@
Introduced command to find the v
eritas version(HM54509)
@@
Revised the query for obtaining
APG43 hardware version (HM71509)
@@
Introduced the command to check the frchangedisk
version (HM71623)
@@
Introduced command to check the
BIOS revision (HM71628)
@@
Added the command to check the D
VD model and the write cache status (HM76392)
@@
Added the command to quota of di
sks for APG43 (HM76423)
@@
Added the command to list the ha
rdware configuration table (HM77062)
@@
Added the command to check if th
e autoadminlogon feature is enabled or not (HM91777)
@@20110106
AUSBIN
CXC1371120/4 R7F
@@
Added command to check the clust
er configuration (HL74967)
@@20110615
AUSBIN
CXC1371120/4 R8A
@@
Changed the code to find the HK
U Administrator registry key (HO21753)
@@
Added a command to check the ws
rm service startup type and state (HO57613)
@@
Added a command to check if the
folder V:\APZ\DATA\BOOT is present or not (HO57613)
@@
Added new folders for cacls che
ck for system disks (HO40579)
@@20110825
AUSBIN
CXC1371120/4 R8B
@@
Included new folders under cacl
s command (HO66275)
@@20110311
AUSBIN
CXC1371120/4 R9A
@@
Included the check for the clus
ter quorum (HP33515 )
@@
Included the commands for APDIS
KDIAG (HP46113 )
@@
Included commands related to EV
O (HP41525 )
@@
Included commands related to HCS
service (HP41532)
@@
@@
@@
@@
@@Start logging to file.
@@The logfile name is set to C:\Temp\AP_Audit_R9A_"hostname"_"nodestate"_"osvers
ion"_"date"_"time".log
@Z@R-
hostname
@COPY {_line1}{hostname}1 30
prcstate
@COPY {_line1}{nodestate}1 9
ver
@COPY {_line2}{osver} 1 22
@IF {osver} = "Windows NT Version 4.0" THEN SET {osver}="NT4"
@IF {osver} = "Microsoft Windows [Ver" THEN SET {osver}="WinS03"
@GETDATE {date} YYMMDD
@GETTIME {time} HHMM
@SET {_VERSION}=wf
@SET {cdt}=NO
dir C:\Temp\audit.lite
@COPY {_line6}{light}40 10
@IF {light} = audit.lite THEN SET {cdt}=YES
del C:\Temp\audit.lite >nul 2<&1
@LOG ON C:\Temp\AP_Audit_R9A_{hostname}_{nodestate}_{osver}_{date}_{time}.log
@@
@GETTIME {start_hh} HH
@GETTIME {start_mm} MM
echo "AUSBIN CXC 137 1120/4 R9A"
cd /d C:\
@COMMENT DATE={date}, TIME={time}
@SET {WinFIOLver}="WinFIOL version unknown"
@IF {_VERSION} = "wf" THEN GOTO WINFIOLver6
@LENGTH {_VERSION} {length1}
@IF {length1} = 2 THEN GOTO WINFIOLverCheck
@IF {length1} = 3 THEN GOTO WINFIOLverSPCheck
@IF {length1} > 3 THEN GOTO WinFIOLverUnknown
@LABEL WINFIOLverCheck
@COPY {_VERSION} {WinFIOLver1} 1 1
@SET {WinFIOLver}="WinFIOL " + {WinFIOLver1} + "." + {WinFIOLver2}
@GOTO WINFIOLend
@LABEL WINFIOLverSPCheck
@SET {WinFIOLver}="WinFIOL " + {WinFIOLver1} + "." + {WinFIOLver2} + " SP" + {Wi
nFIOLver3}
@GOTO WINFIOLend
@LABEL WINFIOLver6
@SET {WinFIOLver}="WinFIOL 6.4"
@LABEL WinFIOLverUnknown
@LABEL WINFIOLend
@COMMENT WinFIOL Version: {WinFIOLver}
dsdls | find "MML"
@SCAN {_line1} "MML" {pos}
@LENGTH {_line1}{length1}
@IF {length1} = 0 THEN GOTO NO_MML
@SET {mkah}=MML
@GOTO END_MML
@LABEL NO_MML
@SET {mkah}=NOMML
@LABEL END_MML
dsdls | find /i "ap2"
@IF {length1} = 0 THEN SET {ap_no}="ap1"
@COPY {_line1}{ap_no}1 3
@LOWCASE {ap_no}
@IF {ap_no}<> "ap2" THEN SET {ap_no}="ap1"
@@-------------------------------------------------------------------------@@ Reason: To Identify and time stamp this audit.
@@
hostname
date /t
time /t
@@
@@-------------------------------------------------------------------------@@ Reason: To get the operating system version.
@@
cd /d C:\
ver
@COMMENT OS={osver}
@@
@@ Expected result: NT4 or WinS03.
@@
@@-------------------------------------------------------------------------@@ Reason: To check if this node is Active or Passive.
@@
prcstate
@@
@@ Expected result: active | passive
@@
@@-------------------------------------------------------------------------@@ Reason: Find out which hardware version, APG40/C2, APG40/C4 or APG43.
hwver
@COPY {_line3}{hwver}1 8
@SET {bchwver} = ""
@IF {length1} = 0 THEN GOTO NO_HWVER
@IF {hwver}="APG40C/4" THEN GOTO HW_SET
@IF {hwver}="APG43" THEN GOTO HW_SET
@LABEL NO_HWVER
@SET {hwver}="APG40C/2"
@LABEL HW_SET
@COMMENT hwver={hwver}
@IF {hwver}="APG40C/4" THEN GOTO NOT_GEP
@IF {hwver}="APG40C/2" THEN GOTO NOT_GEP
reg query "HKLM\Software\Ericsson\Adjunct Processor\APOS" /v HwVersion
@LABEL NOT_GEP
@SET {bc}=""
@@swrsid
@@COPY {_line1}{apzbcver}32 2
nels
@PASTE {systype} {_lines}
@COMPACT {systype}
@SIZE {systype} {numtype}
@SET {indextype} = 1
@WHILE {indextype} < {numtype}
@IF {systype[{indextype}]} MATCHES ".*not recognized.*" THEN GOTO NOT_BC
@BEFORE {APtype} {systype[{indextype}]} ":"
@IF {APtype} MATCHES ".*System Type.*" THEN @AFTER {CPtype} {systype[{indextype}
]} ":"
@IF {APtype} MATCHES ".*System Type.*" THEN @BEFORE {CPtype} {CPType} "-"
@IF {APtype} MATCHES ".*System Type.*" THEN @TRIM {CPtype}
@IF {APtype} MATCHES ".*Node Architecture.*" THEN GOSUB APG43_EVO
@INC {indextype}
@ENDWHILE
@COMMENT CPtype={CPtype}
@@IF {NodeArc} MATCHES ".*Component Based Architecture.*" THEN GOTO APG43_EVO
@IF {CPtype} = "Multi" THEN SET {bchwver}="BC"
@LABEL NOT_BC
@@COMMENT hwver={hwver}
@@COMMENT bchwver={bchwver}
@@ Expected result: APG40/C2, APG40/C4 or APG43 stored in var {hwver}.
@@-------------------------------------------------------------------------@@ Reason: To get the computer name
@@
@SET {NODEA} = %COMPUTERNAME:~0,-1%A
@SET {NODEB} = %COMPUTERNAME:~0,-1%B
@@
@@-------------------------------------------------------------------------@@ Reason: To get the system software history.
@@
swrsid -h
@@
@@ Expected result: A history list.
@@
@@-------------------------------------------------------------------------@@ Reason: To check that correct software is installed.
@@
swrprint -a
@@
@@ Expected result: compare with proper CM-level.
@@-------------------------------------------------------------------------@@ Reason: To check that software folders match swrprint above.
@@
dir /s C:\acs\data\FCH\current\ | findstr /I "CXC SETUP.EXE"
@@
@@ Expected result: compare with swrprint and the other node.
@@-------------------------------------------------------------------------@@ Reason: To check which hot fixes and security patches are installed.
@@
@IF {hwver} = "APG43" THEN GOTO END_SECPATCHES
type "C:\Program Files\FORCE\hflist.txt"
cd /d C:\temp && regedit /e C:\temp\hfix.log "HKEY_LOCAL_MACHINE\SOFTWARE\FORCE
Computers\LBB\Hotfix\"
@T 5
if exist C:\temp\hfix.log type C:\temp\hfix.log && del C:\temp\hfix.log
@@
@@ Expected result: R1.1 has to be installed before S3.2 is installed
@@
,if not S2.4 might be corrupt.
@@
Note: This is not valid after R1.9
@LABEL END_SECPATCHES
@@-------------------------------------------------------------------------@@ Reason: Check if the repair fix 109 22-APZ 212 30/4-494 was correct installed
.
@@
cd /d c:\temp && regedit /e RunOnce.txt "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\RunOnce"
cd /d c:\temp && regedit /e RunOnceEx.txt "HKEY_LOCAL_MACHINE\SOFTWARE\Microsof
t\Windows\CurrentVersion\RunOnceEx"
type RunOnce.txt && del RunOnce.txt
type RunOnceEx.txt && del RunOnceEx.txt
@@
@@ Expected Result: Empty keys, otherwise S2.4 installation is not completed.
@@-------------------------------------------------------------------------@@ Reason: Check the registered IE version.
cd /d C:\temp && regedit /e iever.log "HKEY_LOCAL_MACHINE\Software\Microsoft\Int

ernet Explorer\"
@COMMENT IE_Ver
type iever.log | FindStr /R "^\"Ve"
del iever.log
@@ Expected Result: The first Version key printed is the IE version.
@@-------------------------------------------------------------------------@@ Reason: To check the diskeeper installer file/folder
@IF {hwver} = "APG43" THEN GOTO NO_DISKEEPER_INST
dir "C:\WINNT\Installer" | findstr "2015A3F9-5EED-4C67-BD3A-FF024A40C22D"
@LABEL NO_DISKEEPER_INST
@@
@@-------------------------------------------------------------------------@@ Reason: To Check for incorrectly installed files.
@@
dir "C:\Program Files\AP\" /s | findstr /ie "\.1"
@@
@@ Expected result: No filenames ending with .1 should be printed.
@@-------------------------------------------------------------------------@@ Reason: Check that SSH installation is correct. (SCS534984)
@@
dir "C:\Program Files\F-Secure\ssh server"
@@
@@ Expected result: No filenames ending with .1 should be printed.
@@-------------------------------------------------------------------------@@ Reason: OSU: Check that no leftovers exist from any earlier OSU attempt. (TR
HG95576)
@@
@IF {osver} = "WinS03" THEN GOTO NO_NTDSNT4
cd /d c:\temp && regedit /e Ntdsnt4.txt "HKEY_LOCAL_MACHINE\SYSTEM\CurrentContr
olSet\Services\NTDS"
type Ntdsnt4.txt && del Ntdsnt4.txt
@@
@@ Expected result: No keys should exist.
@LABEL NO_NTDSNT4
@@-------------------------------------------------------------------------@@ Reason: To check that correct software is installed.
@@ A bug in Pragma Telnet Server Build 7 may result in no user profile being cre
ated when user logs in using telnet.
@@ Upgrade to Pragma Telnet Server Build 10 is done with LBB Hotfix 5.3.1 (AC-A1
6 for R9.1),
@@ however due to a problem at installation of LBB 5.3.1 the Pragma Telnet Serve
r remains on Build 7 although
@@ LBB Hotfix 5.3.1 shows that installation is successful and swrprint shows tha
t Pragma Telnet Server Build 10 is installed.
@@ Primus solution SCS494532 has been created, and the next check can be done:
@@
@IF {hwver} = "APG43" THEN GOTO NOP_PRAGMA
@IF {osver} = "WinS03" THEN GOTO NO_PRAGMA
type "C:\Program Files\Pragma\TelnetD\readme.txt" | findstr /C:"2000 Build"
dir "C:\Program Files\Pragma\TelnetD\TELNETD.exe"
@@
@@ Expected result:
@@ Pragma TelnetServer 2000 Build 7
@@
@@ Directory of C:\Program Files\Pragma\TelnetD
@@ 10/03/02 08:33a
163,840 TELNETD.exe
@@
1 File(s)
163,840 bytes
@@
@@ Note: The size of file TELNETD.exe is 163840 bytes for Build 7, and 172032 by
tes for Build 10.

@@
@@ If wrong version of Telnet served is installed, the solution can be applied.
@LABEL NO_PRAGMA
@@-------------------------------------------------------------------------@@ Reason: OSU: To check that no other user than Default is defined in the Pragm
a Telnet Server.
@@
cd /d C:\temp && regedit /e Pragma_HKLM.txt "HKEY_LOCAL_MACHINE\SOFTWARE\PragmaS
ystems\TelnetD\Users\"
type C:\temp\Pragma_HKLM.txt | find "[HKEY_LOCAL_MACHINE\SOFTWARE\PragmaSystems\
TelnetD\Users\\"
@@
@@ Expected result: Nothing else than Default entries are printed
@@
@@ [HKEY_LOCAL_MACHINE\SOFTWARE\PragmaSystems\TelnetD\Users\\Default]
@@ [HKEY_LOCAL_MACHINE\SOFTWARE\PragmaSystems\TelnetD\Users\\Default\Environment
]
@@ [HKEY_LOCAL_MACHINE\SOFTWARE\PragmaSystems\TelnetD\Users\\Default\TerminateSt
rings]
@@
@@ Logging more pragma configuration data:
type C:\temp\Pragma_HKLM.txt && del C:\temp\Pragma_HKLM.txt
cd /d C:\temp && regedit /e Pragma_Tel.txt "HKEY_LOCAL_MACHINE\SOFTWARE\PragmaSy
stems\TelnetD\"
type C:\temp\Pragma_Tel.txt && del C:\temp\Pragma_Tel.txt
cd /d C:\temp && regedit /e Pragma_Env.txt "HKEY_LOCAL_MACHINE\SOFTWARE\PragmaSy
stems\TelnetD\Users\Default\Environment\"
type C:\temp\Pragma_Env.txt && del C:\temp\Pragma_Env.txt
cd /d C:\temp && regedit /e Pragma_Term.txt "HKEY_LOCAL_MACHINE\SOFTWARE\PragmaS
ystems\TelnetD\Users\Default\TerminateStrings\"
type C:\temp\Pragma_Term.txt && del C:\temp\Pragma_Term.txt
@@
@LABEL NOP_PRAGMA
@@-------------------------------------------------------------------------@@ Reason: AP: Multiple Time Zone Link List.
@@ No time difference between both the APG Nodes.
@@ CP:Time zones, GMT, summer time periods (if defined).
@@ No time deviation should exist between AP and CP clocks.
net time \\{NODEA} && net time \\{NODEB}
reg query \\{NODEA}\HKLM\System\CurrentControlSet\Control\TimeZoneInformation
reg query \\{NODEB}\HKLM\System\CurrentControlSet\Control\TimeZoneInformation
tzls -a
cd /d C:\temp && regedit /e tz.log "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\TimeZoneInformation\"
@T 10
type C:\temp\tz.log
@T 5
del C:\temp\tz.log
@IF {nodestate} <> "active" THEN GOTO NO_PASSIVE_1
mtzln -p
date /t&time /t&mml CACLP:ALL;
@@
@@ Expected result:
TMZ : TZ
@@
-----------------------------------@@
0 = (GMT+01:00) Brussels, Berlin, Bern, Rome,
@@
Stockholm, Vienna
@@
@LABEL NO_PASSIVE_1
@@--------------------------------------------------------------------------
@@ Reason: Display environment variables, verify the path settings.

@@
set
@@
@@ Expected result: The environment variable, output depending of installed
@@
applications. Verify the path settings
@@
@@ Example from 11.3 AC-M314
@@
@@
@@ AP_HOME=C:\Program Files\AP
@@ AVENGINE=C:\PROGRA~1\CA\SHARED~1\SCANEN~1
@@ ClusterLog=C:\acs\logs\Cluster.log
@@ ClusterLogLevel=3
@@ COMPUTERNAME=AP150B
@@ ComSpec=C:\WINNT\system32\cmd.exe
@@ CRTERM=ansi
@@ HOMEDRIVE=C:
@@ HOMEPATH=\
@@ INCLUDE=C:\Program Files\Mts\Include
@@ INOCULAN=C:\PROGRA~1\CA\ETRUST~1
@@ LIB=C:\Program Files\Mts\Lib
@@ NUMBER_OF_PROCESSORS=1
@@ OS=Windows_NT
@@ Os2LibPath=C:\WINNT\System32\os2\dll;
@@ Path=C:\WINNT\system32;C:\WINNT;C:\Program Files\Pragma\Shared Files;C:\Progr
am Files\Pragma\Toolkit;C:\PROGRA~1\Distinct;
@@ C:\PROGRA~1\COMMON~1\DISTIN~1;c:\Program Files\FORCE\AM_Services;c:\Program F
iles\Pkzip;C:\Program Files\Mts;
@@ C:\Program Files\Dptmgr;C:\Program Files\AP\ACS\bin;C:\Program Files\AP\ACS\l
ib;C:\Program Files\AP\OCS\bin;
@@ C:\Program Files\AP\OCS\lib;C:\Program Files\AP\AES\bin;C:\Program Files\AP\A
ES\lib;C:\PROGRA~1\F-Secure\ssh;
@@ C:\PROGRA~1\CA\SHARED~1\SCANEN~1;C:\PROGRA~1\CA\ETRUST~1;C:\Program Files\AP\
CPS\bin;C:\Program Files\AP\CPS\lib;
@@ C:\Program Files\AP\FMS\bin;C:\Program Files\AP\FMS\lib;C:\Program Files\AP\M
AS\bin;C:\Program Files\AP\MAS\lib;
@@ C:\Program Files\AP\MCS\bin;C:\Program Files\AP\MCS\lib;C:\Program Files\AP\P
ES\bin;C:\Program Files\AP\PES\lib;
@@ C:\Program Files\AP\STS\bin;C:\Program Files\AP\STS\lib;
@@ PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.JS
@@ PRAGMASYS_INETD_PID=137
@@ PRAGMASYS_INETD_SOCK=216
@@ PRAGMASYS_MODE=Stream
@@ PRAGMASYS_REMOTE_ADDR=134.138.111.22
@@ PRAGMASYS_TELNETD_PID=779
@@ PROCESSOR_ARCHITECTURE=x86
@@ PROCESSOR_IDENTIFIER=x86 Family 6 Model 8 Stepping 6, GenuineIntel
@@ PROCESSOR_LEVEL=6
@@ PROCESSOR_REVISION=0806
@@ Prompt=$P$G
@@ SystemDrive=C:
@@ SystemRoot=C:\WINNT
@@ TEMP=C:\TEMP
@@ TERM=ansi
@@ TMP=C:\TEMP
@@ USERDOMAIN=AP150DOM
@@ USERNAME=Administrator
@@ USERPROFILE=C:\WINNT\Profiles\Administrator
@@ windir=C:\WINNT
@@
@@-------------------------------------------------------------------------@@ Reason: OSU: Check default input language.
@@
@@ Some keyboards settings may cause Pragma to malfunction in Windows Server 200
3.
@@ (TR HH28381, Italian Keyboard setting).
@@
@COMMENT Current user
@@locale ID (LCID):
cd /d C:\temp && regedit /e KEYB.txt "HKEY_Current_User\Keyboard Layout\Preload\
"
type C:\temp\Keyb.txt && del C:\temp\Keyb.txt
@@ LCID defined substitute:
cd /d C:\temp && regedit /e Keyb.txt "HKEY_Current_User\Keyboard Layout\Substitu
tes\"
@COMMENT Default user
@@ locale ID (LCID):
cd /d C:\temp && regedit /e KEYB.txt "HKEY_Users\.DEFAULT\Keyboard Layout\Preloa
d\"
cd /d C:\temp && regedit /e Keyb.txt "HKEY_Users\.DEFAULT\Keyboard Layout\Substi
tutes\"
@COMMENT Administrator
reg query "HKU" | findstr -e 500
@LENGTH {_line1} {length}
@IF {length} = 0 THEN GOTO END_KEYB
@set {hku_admin} = {_line1}
@IF {osver} = "NT4" THEN GOTO NO_QUERY
REG QUERY "{hku_admin}\Keyboard Layout\Preload"
REG QUERY "{hku_admin}\Keyboard Layout\Substitutes"
@GOTO END_KEYB
@LABEL NO_QUERY
@@ locale ID (LCID):
cd /d C:\temp && regedit /e Keyb.txt "HKEY_USERS{key}Preload\"
cd /d C:\temp && regedit /e Keyb.txt "HKEY_USERS{key}Substitutes\"
@LABEL END_KEYB
@@
@@ Expected result: OSU: If 'Italian (Italy) - Italian' keyboard is the default
setting (00000410="it"),
@@
change it to
@@
English (United States) - US,00000409="us".
@@
@@-------------------------------------------------------------------------@@ Reason: OSU: To check that no empty user variable PATH exist.
@@
@IF {osver} = "WinS03" THEN GOTO OSU_ONLY_NT4
cd /d C:\temp && regedit /e hk_users.txt "HKEY_USERS"
type hk_users.txt | find /I "PATH"
del hk_users.txt
@@
@@ Expected result: No occurrences of "PATH"=""
@@
@@ It's a requirement before starting OSU that no empty user variable PATH exist
.
@@
@@-------------------------------------------------------------------------@@ Reason: OSU: Check for file c:\winnt\backup.fts (TR HG66302).
@@
dir c:\winnt\System32\backup.fts
@@
@@ Expected result: file backup.fts present.
@@
@@ It's a requirement before starting OSU that the file exist.
@@ If it's missing a "dummy" file named backup.fts can be created or copied
@@ from the other node.
@@
@LABEL OSU_ONLY_NT4
@@-------------------------------------------------------------------------@@ Reason: OSU: Check for directories that should be files (TR HG72032).
@@
dir C:\ /s /b /a /ad|findstr \.|findstr /v /r \..*\\|findstr /v \\\.|findstr /v
".IE5 assembly WinSxS profiles"
@@
@@ Expected result: No directories found that should be files.
@@
(OS2.EXE OS2SRV.EXE)
@@
@@-------------------------------------------------------------------------@@ Reason: OSU: Check if Display of Legal Notice is active for PC-Anyware and
@@
Console login.
@@
@@
cd /d c:\temp && regedit /e Legal_Notice.txt "HKEY_LOCAL_MACHINE\SOFTWARE\Micros
oft\Windows NT\CurrentVersion\Winlogon"
type Legal_Notice.txt | find "LegalNoticeCaption"
type Legal_Notice.txt | find "LegalNoticeText"
del Legal_Notice.txt
@@ Expected result:
@@
@@ "LegalNoticeCaption"=""
@@ "LegalNoticeText"=""
@@
@@ For OSU it's a requirement that no Legal Notice message is displayed at autol
ogon.
@@
@@-------------------------------------------------------------------------@@ Reason : Checking the verbosity files in C:\acs\data\FCR
@@
type \\{NODEA}\C$\acs\data\FCR\verbosity
type \\{NODEB}\C$\acs\data\FCR\verbosity
@@
@@ Expected result: This file should not present. Output for the above command:
@@
The system cannot find the file specified.
@@
@@-------------------------------------------------------------------------@@ Reason: To verify that no memory/handle leaks exist.
@@
To check memory configuration, allocation and usage.
@@
To check the pagefile.
@@
pstat
@@
@@ Expected result: This is an example of reasonable values of an msc
@@Pstat version 0.3: memory: 785844 kb uptime: 1 0:26:56.631
@@
@@PageFile: \??\C:\pagefile.sys
@@
Current Size: 819200 kb Total Used: 1264 kb Peak Used 1272 kb
@@
@@ Memory: 785844K Avail: 549748K TotalWs: 329784K InRam Kernel: 2416K P:19140K
@@ Commit: 217596K/ 179384K Limit:1566560K Peak: 234464K Pool N: 9416K P:19208K
@@
@@-------------------------------------------------------------------------@@ Reason: To make sure no serious alarms exist.
@@
alist
@@
@IF {nodestate} <> "active" THEN SET {cpno}="CP not"
@IF {mkah} <> "MML" THEN SET {cpno}="CP not"
@IF {mkah} <> "MML" THEN GOTO NO_PASSIVE_2
@IF {bchwver} = "BC" THEN GOTO BC_ALACP_CHECK
mml ALACP;
@GOTO BC_ALACP_END
@LABEL BC_ALACP_CHECK
mml -cp ALL ALACP;
@LABEL BC_ALACP_END
@COPY {_line1}{cpno} 1 5
@IF {cpno} <> "ALARM" THEN SET {cpno}="CP not"
@IF {cpno} = "CP not" THEN GOTO NO_PASSIVE_2
@COPY {_line5}{alacp} 10 9
@IF {bchwver} = "BC" THEN GOTO BC_ALLIP_CHECK
mml ALLIP:ALCAT={alacp};
mml ALLIP:ACL=A1;ALLIP:PRCA=39;
@GOTO BC_ALLIP_END
@LABEL BC_ALLIP_CHECK
mml -cp ALL ALLIP:ALCAT={alacp};
mml -cp ALL ALLIP:ACL=A1;ALLIP:PRCA=39;
@LABEL BC_ALLIP_END
@@
@@ Expected result: No APZ alarms should exist.
@@
@@-------------------------------------------------------------------------@@ Reason: To check status of the LAN's towards the AP directory service.
@@
@IF {bchwver} = "BC" THEN GOTO BC_APAMP_CHECK
mml APAMP;
@GOTO APAMP_CHECK_END
@LABEL BC_APAMP_CHECK
mml -cp ALL APAMP;
@LABEL APAMP_CHECK_END
@@
@@ Expected result: The STATUS shall be: one ACTIVE and one PASSIVE
@@ link towards each node.
@@
@LABEL NO_PASSIVE_2
@@-------------------------------------------------------------------------@@ Reason: To check status of the directory service (internal in the AP
@@ and towards the cp.
@@
dsdls -a
@@
@@ Expected result: Both the internal AP node and the cp0 should be
@@ listed with their applications registered within dsd.
@@
@@--------------------------------------------------------------------------
@@ Reason : To check the AP node number

@@
phaprint ACS_ALHEXECBIN_apNodeNumber
@@
@@Expected result: The AP node number should be listed
@@
@@-------------------------------------------------------------------------@@ Reason: To check that the communication devices are working properly.
@@
@IF {mkah} <> "MML" THEN GOTO NO_MML_OR_AP2
@IF {nodestate} <> "active" THEN GOTO NO_CP
@IF {cpno} = "CP not" THEN GOTO NO_CP
@IF {bchwver} = "BC" THEN GOTO BC_OCTDP_CHECK
mml OCTDP;
@GOTO OCTDP_CHECK_END
@LABEL BC_OCTDP_CHECK
mml -cp ALL OCTDP;
@LABEL OCTDP_CHECK_END
@@
@@ Expected result: Connections should exists over both devices
@@ (around 30), they should be in state NORMAL.
@@
@@-------------------------------------------------------------------------@@ Reason: EXCHANGE IDENTITY DATA
@@
@IF {bchwver} = "BC" THEN GOTO BC_IOEXP_CHECK
mml IOEXP;
@GOTO IOEXP_CHECK_END
@LABEL BC_IOEXP_CHECK
mml -cp ALL IOEXP;
@LABEL IOEXP_CHECK_END
@@
@@ Expected result:
EXCHANGE IDENTITY DATA
@@
@@
IDENTITY
@@
4101R1KREF240CM013 626
@@
@@-------------------------------------------------------------------------@@ Reason: To check the CP hardware versions.
@@
@SET {apzversion} = 0
@IF {bchwver} = "BC" THEN GOTO BC_DPHIP_CHECK
mml DPHIP;
mml SAOSP;
@GOTO BC_DPHIP_END
@LABEL BC_DPHIP_CHECK
mml -cp ALL DPHIP;
mml -cp ALL SAOSP;
@LABEL BC_DPHIP_END
@@
@@ Extracting the APZ Version and Type
@@
mml saosp | find "APZ VERSION"
@SCAN {_line1} "APZ VERSION" {pos}
@SET {pos} = {pos}-5
@COPY {_line1}{apzver} {pos} 3
@TRIM {apzver}
@@
mml saosp | find "APZ TYPE"
@SCAN {_line1} "APZ TYPE" {pos}
@SET {pos} = {pos}-5

@COPY {_line1}{apzver1} {pos} 3
@TRIM {apzver1}
@CONCAT {apzversion} {apzver1} {apzver}
@@
@@ Expected result: A printout of the hardware identities of all
@@ the boards in the CP. Check IPNX, IPNA or IPNAX versions.
@@
@@ Recommended lowest versions:
@@ IPNX and IPNA:
@@ IPNX
ROJ 207 503/1 R2A
@@ RPIRS-1 ROJ 207 124/2 R2A (IPNA)
@@
@@ IPNAX:
@@ IPNAX ROJ 208 435/1
R2A
@@ IPNAX ROJ 208 435/2
R1A
@@
@@-------------------------------------------------------------------------@@ Reason: To check the CP EVENT RECORD.
@@
@IF {bchwver} = "BC" THEN GOTO BC_DIRCP_CHECK
mml DIRCP;
@GOTO BC_DIRCP_END
@LABEL BC_DIRCP_CHECK
mml -cp ALL DIRCP;
@LABEL BC_DIRCP_END
@@
@@ Expected result: A printout of the CP EVENT RECORD
@@
@@-------------------------------------------------------------------------@@ Reason: To check the IPN status.
@@ Note: Only for Classic, APZ 212 3X
@@
@IF {apzver} > "33" THEN GOTO NO_IPN
mml "OCINP:IPN=ALL;OCSIP:IPN=ALL;OCESP:IPN=ALL;"
@LABEL NO_CP
ipnaadm -list
dir K:\OCS\logs
@LABEL NO_MML_OR_AP2
@IF {ap_no} = "ap2" THEN GOTO NO_IPN_AP2
@@ To avoid printing ipn for other than classic apz's
@@ will only work if win.ini is correct.
type C:\winnt\win.ini | find "y="
@COPY {_line1}{wininiver} 11 1
@SET {classic}=0
@IF {wininiver} = "c" THEN SET {classic} = 1
@IF {wininiver} = "C" THEN SET {classic} = 1
@IF {classic} <> 1 THEN GOTO NO_IPN
@@ IPN to find out if last ipn fc was correct.
type C:\tftpboot\boot.ipn0
@@
fc c:\tftpboot\boot.ipn0 c:\tftpboot\boot.ipn1
fc c:\tftpboot\boot.ipn2 c:\tftpboot\boot.ipn3
@@
type c:\"Program Files"\AP\OCS\conf\boot.ipnX.cp_loading
type c:\"Program Files"\AP\OCS\conf\boot.ipnX.not_loading
@@
fc c:\tftpboot\boot.ipn0 c:\"Program Files"\AP\OCS\conf\boot.ipnX.cp_loading

@@
fc c:\tftpboot\boot.ipn1 c:\"Program Files"\AP\OCS\conf\boot.ipnX.cp_loading
@@
fc c:\tftpboot\boot.ipn2 c:\"Program Files"\AP\OCS\conf\boot.ipnX.not_loading
@@
fc c:\tftpboot\boot.ipn3 c:\"Program Files"\AP\OCS\conf\boot.ipnX.not_loading
@@
@@ Expected result: Correct versions on board and in configuration files.
@@
For an AP-2 ipnaadm -list should normally be empty
@@-------------------------------------------------------------------------@@ Reason: To get the IPN osdumps.
@@
@@IPNA00:
@@for %i in (k:\ocs\logs\*ipna00*) do echo "Typing %~ni " && ipnaadm -osdump -ge
t %~nxi
@@IPNA01:
@@for %i in (k:\ocs\logs\*ipna01*) do echo "Typing %~ni " && ipnaadm -osdump -ge
t %~nxi
@@
@@ Expected result: The IPN osdumps are printed for later analysis.
@@
@GOTO NO_PASSIVE_4
@LABEL NO_IPN_AP2
ipnaadm -list
@LABEL NO_IPN
@LABEL NO_PASSIVE_4
@@-------------------------------------------------------------------------@@ Reason: Check network status.
@@
netstat -an
@@
@@ Expected result: Total Connections: 400-500
@@
ESTABLISHED: 75-100
@@
LISTENING: 200-300
@@
TIME_WAIT and CLOSE_WAIT: Varies a lot.
@@
@@-------------------------------------------------------------------------@@ Reason: Network statistics.
@@
netstat -s
@@
@@ Expected result: Statistics
@@
@@-------------------------------------------------------------------------@@ Reason: Verify that no important corrections are missing.
@IF {mkah} <> "MML" THEN GOTO NO_PASSIVE_5
@IF {bchwver} = "BC" THEN GOTO BC_PCORP_CHECK
mml "PCORP:BLOCK=APAP&MTAP&JTP&OCAD&OCADM&OCITS&AD2";
@GOTO PCORP_CHECK_END
@LABEL BC_PCORP_CHECK
mml -cp ALL "PCORP:BLOCK=APAP&MTAP&JTP&OCAD&OCADM&OCITS&AD2";
@LABEL PCORP_CHECK_END
@@
@@ Expected result: Corrections according to current CM/ACA level.
@@
@@--------------------------------------------------------------------------
@@ Reason: To check that no buffer congestions are present.

@@
@IF {bchwver} = "BC" THEN GOTO BC_LABUP_CHECK
mml LABUP;
@GOTO LABUP_CHECK_END
@LABEL BC_LABUP_CHECK
mml -cp ALL LABUP;
@LABEL LABUP_CHECK_END
@@
@@ Expected result: NCONG = 0
@@
@LABEL NO_PASSIVE_5
@@-------------------------------------------------------------------------@@ Hardware dependent checks
@IF {bchwver}="BC" THEN GOSUB BC_HW
@IF {hwver}="APG43" THEN GOSUB APG43_HW
@IF {hwver}="APG40C/4" THEN GOSUB HW_C4
@IF {hwver} = "APG40C/2" THEN GOSUB HW_C2
@@-------------------------------------------------------------------------@@ Reason: To verify the LINK SPEED in the SCB-RP boards
@@
@@IF {hwver} <> "APG43" THEN GOTO SCB_END
@@hwcls | findstr "SCB-RP"
@@PASTE {SCBInfo} {_lines}
@@COMPACT {SCBInfo}
@@SIZE {SCBInfo} {nlines}
@@IF {nlines} <=1 THEN GOTO SCB_END
@@SET {indexval} = 1
@@SET {SCBRP_AP2} = 0
@@WHILE {indexval} < {nlines}
@@COPY {SCBInfo[{indexval}]} {chkipval} 1 8
@@TRIM {chkipval}
@@IF {chkipval} MATCHES "1.2.0.4" THEN GOTO STORE_IP_AP1
@@IF {chkipval} MATCHES "15.2.0.4" THEN GOTO STORE_IP_AP2
@@GOTO IP_STORED
@@LABEL STORE_IP_AP2
@@SET {SCBRP_AP2} = 1
@@LENGTH {SCBInfo[{indexval}]} {Lenval_AP2}
@@COPY {SCBInfo[{indexval}]} {FullLine_AP2} 1 {Lenval_AP2}
@@CUT {slotval_AP2} {FullLine_AP2} COL 2 Sep " "
@@IF {slotval_AP2} MATCHES "25" THEN GOTO Slot_IP25_AP2
@@ Storing IP Address of SCB-RP with Slot 0
@@CUT {IPvalue0A_AP2} {FullLine_AP2} COL 6 Sep " "
@@CUT {IPvalue0B_AP2} {FullLine_AP2} COL 7 Sep " "
@@GOTO IP_STORED
@@LABEL Slot_IP25_AP2
@@CUT {IPvalue25A_AP2} {FullLine_AP2} COL 6 Sep " "
@@CUT {IPvalue25B_AP2} {FullLine_AP2} COL 7 Sep " "
@@GOTO IP_STORED
@@LABEL STORE_IP_AP1
@@LENGTH {SCBInfo[{indexval}]} {Lenval}
@@COPY {SCBInfo[{indexval}]} {FullLine} 1 {Lenval}
@@CUT {slotval} {FullLine} COL 2 Sep " "
@@IF {slotval} MATCHES "25" THEN GOTO Slot_IP25
@@CUT {IPvalue0A} {FullLine} COL 6 Sep " "
@@CUT {IPvalue0B} {FullLine} COL 7 Sep " "
@@GOTO IP_STORED
@@LABEL Slot_IP25
@@CUT {IPvalue25A} {FullLine} COL 6 Sep " "
@@CUT {IPvalue25B} {FullLine} COL 7 Sep " "
@@LABEL IP_STORED
@@INC {indexval}
@@ENDWHILE
@@
@@ Connecting to SCB-RP Slot 0 using Telnet with IPA
@@
@@COMMENT Connecting to SCB-RP Slot 0 with IPA : {IPvalue0A}
@@telnet /R {IPvalue0A}
@@GOSUB SCB_Information
@@
@@ Connecting to SCB-RP Slot 0 using Telnet with IPB
@@
@@COMMENT Connecting to SCB-RP Slot 0 with IPB : {IPvalue0B}
@@telnet /R {IPvalue0B}
@@
@@ Connecting to SCB-RP Slot 25 using Telnet with IPA
@@
@@COMMENT Connecting to SCB-RP Slot 25 with IPA : {IPvalue25A}
@@telnet /R {IPvalue25A}
@@
@@ Connecting to SCB-RP Slot 25 using Telnet with IPB
@@
@@COMMENT Connecting to SCB-RP Slot 25 with IPB : {IPvalue25B}
@@telnet /R {IPvalue25B}
@@
@@
@@ Checking the SCB-RP for AP2 Configurations
@@
@@IF {SCBRP_AP2} <> 1 THEN GOTO SCB_END
@@
@@ Connecting to SCB-RP Slot 0 using Telnet with IPA on AP2 Machine
@@
@@COMMENT Connecting to SCB-RP Slot 0 for AP2 with IPA : {IPvalue0A_AP2}
@@telnet /R {IPvalue0A_AP2}
@@
@@ Connecting to SCB-RP Slot 0 using Telnet with IPB on AP2 Machine
@@
@@COMMENT Connecting to SCB-RP Slot 0 for AP2 with IPB : {IPvalue0B_AP2}
@@telnet /R {IPvalue0B_AP2}
@@
@@ Connecting to SCB-RP Slot 25 using Telnet with IPA on AP2 Machine
@@
@@COMMENT Connecting to SCB-RP Slot 25 for AP2 with IPA : {IPvalue25A_AP2}
@@telnet /R {IPvalue25A_AP2}
@@
@@ Connecting to SCB-RP Slot 25 using Telnet with IPB on AP2 Machine
@@
@@COMMENT Connecting to SCB-RP Slot 25 for AP2 with IPB : {IPvalue25B_AP2}
@@telnet /R {IPvalue25B_AP2}
@@LABEL SCB_END
@@-------------------------------------------------------------------------@@ Reason: Check that the IIS Meta database is consistent.

@@
@IF {osver} = "WinS03" THEN GOTO NOMD
mdutil enum_all
@@
@@ Expected result: Readable ACSII output.
@@
@@-------------------------------------------------------------------------@@ Reason: Check FTP Sites settings.
@@
mdutil get MSFTPSVC/
mdutil get MSFTPSVC/1
@@
@@ Expected result:
@@AllowAnonymous "Default FTP Site" = 0 ,APIO_1 & APIO_2 = 1
@@LogType "Default FTP Site" = 1 ,APIO_1 & APIO_2 = 0
@LABEL NOMD
@@-------------------------------------------------------------------------@@ Reason: Dump the Users in the System.
@@
userdump
@@
@@ Expected result: 1) Simple test of PDC/BDC communication
@@
2) Both service users exist and are not Locked or
@@
Disabled.
@@
@@ OSU: Make sure that Administrator doesn't have membership in
@@
groups 'Guests' and 'Domain Guests'.
@@ OSU: Performing an upgrade using an account that will expire during the upgra
de
@@
can cause unpredictable behaviour in the AP.
@@
Please verify the expiry data and modify or remove if required.
@@
@@-------------------------------------------------------------------------@@ Reason: Check that the virtual directories are correct.
@@
ftpls
vdls -n "Default FTP Site"
vdls -n "APIO_1"
vdls -n "APIO_2"
@@
@@ Expected result: Only absolute paths are used, no "shares" used.
@@
@@ OSU: "Default FTP Site" has to be "C:\Inetsrv\ftproot"
@@
@@ Example:
@@
@@C:\>ftpls
@@Microsoft (R) Windows Script Host Version 5.6
@@Copyright (C) Microsoft Corporation 1996-2001. All rights reserved.
@@
@@Site Name
"Default FTP Site"
@@IP Address:Port:
":21:"
@@Physical Path
"c:\inetsrv\ftproot"
@@Site Status
"STARTED"
@@
@@Site Name
"APIO_1"
@@IP Address:Port:
"192.168.169.1:21:"
@@Physical Path
"c:\inetsrv\cpftproot"
@@Site Status
"STARTED"
@@
@@Site Name
"APIO_2"
@@IP Address:Port:
"192.168.170.1:21:"
@@Physical Path
"c:\inetsrv\cpftproot"
@@Site Status
"STARTED"
@@
@@
@@C:\>vdls -n "Default FTP Site"
@@
@@Virtual Directory
ACS
@@Physical Path
"C:\ACS\data\FTP"
@@
@@Virtual Directory
ftpvol
@@Physical Path
"G:\ftpvol"
@@
@@Virtual Directory
images
@@Physical Path
"M:\images"
@@
@@Virtual Directory
tcm_load
@@Physical Path
"v:\apz"
@@
@@
@@C:\>vdls -n "APIO_1"
@@
@@Virtual Directory
APZ
@@Physical Path
"V:\APZ"
@@
@@Virtual Directory
cpa
@@Physical Path
"V:\APZ\data\CPA\CPHW\crash"
@@
@@Virtual Directory
cpb
@@Physical Path
"V:\APZ\data\CPB\CPHW\crash"
@@
@@Virtual Directory
CPSDUMP
@@Physical Path
"L:\CPS\data\FTP"
@@
@@Virtual Directory
CPSLOAD
@@Physical Path
"L:\FMS\data\CPF\RELVOLUMSW"
@@
@@
@@C:\>vdls -n "APIO_2"
@@
@@Virtual Directory
APZ
@@Physical Path
"V:\APZ"
@@
@@Virtual Directory
cpa
@@Physical Path
"V:\APZ\data\CPA\CPHW\crash"
@@
@@Virtual Directory
cpb
@@Physical Path
"V:\APZ\data\CPB\CPHW\crash"
@@
@@Virtual Directory
CPSDUMP
@@Physical Path
"L:\CPS\data\FTP"
@@
@@Virtual Directory
CPSLOAD
@@Physical Path
"L:\FMS\data\CPF\RELVOLUMSW"
@@
@@-------------------------------------------------------------------------@@ Reason: Check anonymous logon setting for the FTP Sites. (TR HH29261)
@@
@IF {osver} = "NT4" THEN GOTO NO_WMIC
wmic /namespace:\\root\MicrosoftIISv2 path IIsFtpServerSetting WHERE "ServerComm
ent='Default FTP Site'" GET AllowAnonymous
ent='Default FTP Site'" GET LogType
ent='APIO_1'" GET AllowAnonymous
ent='APIO_1'" GET LogType
ent='APIO_2'" GET AllowAnonymous
ent='APIO_2'" GET LogType
@@
@@ Expected result:
@@ 'Default FTP Site': AllowAnonymous = FALSE, LogType = 1
@@ 'APIO_1': AllowAnonymous = TRUE, LogType = 0
@@ 'APIO_2': AllowAnonymous = TRUE, LogType = 0
@@
@LABEL NO_WMIC
@@-------------------------------------------------------------------------@@ Reason: To check that file attributes are correctly set.
@@
attrib C:\*
@@
@@ Expected result: Check that these files have following attributes except
@@
for the A attribute that can be either set or not.
@@ NT4:
@@
A
R
C:\AUTOEXEC.BAT
@@
A S
C:\boot.ini
@@
A SH
C:\BOOTSECT.DOS
@@
A H
C:\burinfo.txt
@@
A
R
C:\COMMAND.COM
@@
A SHR
C:\IO.SYS
@@
A SHR
C:\MSDOS.SYS
@@
A SHR
C:\NTDETECT.COM
@@
A SHR
C:\ntldr
@@
@@ WinS03:
@@
A SHR
C:\boot.ini
@@
SH
C:\BOOTSECT.DOS
@@
A SHR
C:\MSDOS.SYS
@@
A SHR
C:\NTDETECT.COM
@@
A SHR
C:\ntldr
@@
A SH
C:\pagefile.sys
@@
@@-------------------------------------------------------------------------@@ Reason: To check that files and that their attributes are correct on E: parti
tion.
@@
(TR HG70690)
@@
@SET {attflag}= "/S"

@IF {osver} = "WinS03" THEN SET {attflag}= "/S /D"
attrib E:\* {attflag}
@@
@@ Expected result: Check that these files have following attributes except
@@
for the A attribute that can be either set or not.
@@
@@
A SHR
E:\BOOT.INI
@@
A SHR
E:\ntdetect.com
@@
A SHR
E:\ntldr
@@
@@
A
E:\cmdcons\*
@@
A SHR
E:\boot.ini
@@
SHR
E:\cmdcons
@@
A SHR
E:\cmldr
@@
A SHR
E:\NTDETECT.COM
@@
A SHR
E:\ntldr
@@
SH
E:\System Volume Information
@@
dir /a:h e:\
@@
@@ Expected result:
@@ NT4:
@@ Volume in drive E is ntboot
@@ Volume Serial Number is 5C4F-3ADC
@@
@@ Directory of e:\
@@
@@ 10/24/00 08:23a
540 BOOT.INI
@@ 01/26/00 05:35p
26,832 ntdetect.com
@@ 01/09/04 01:33p
156,496 ntldr
@@
@@ WinS03:
@@ c:\winnt\profiles\Administrator>dir /a:h e:\
@@ Volume in drive E is ntboot
@@ Volume Serial Number is A469-E377
@@
@@ Directory of e:\
@@
@@ 08/24/2005 06:54 PM
641 BOOT.BAK
@@ 10/28/2005 09:14 AM
641 boot.ini
@@ 10/28/2005 09:14 AM
<DIR>
cmdcons
@@ 03/25/2005 03:00 PM
298,096 cmldr
@@ 03/25/2005 03:00 PM
47,772 NTDETECT.COM
@@ 03/25/2005 03:00 PM
295,536 ntldr
@@ 03/09/2006 01:00 PM
<DIR>
RECYCLER
@@ 10/28/2005 08:58 AM
<DIR>
System Volume Information
@@
5 File(s)
642,686 bytes
@@
3 Dir(s)
20,492,288 bytes free
@@
@@ Note! Check that the hidden directory cmdcons is present on WinS03.
@@-------------------------------------------------------------------------@@ Reason: To check that the AP boots from correct partition.
@@
type e:\boot.ini
@@
@@ Expected result:
@@ NT4:
@@ [boot loader]
@@ timeout=3
@@ default=multi(0)disk(0)rdisk(0)partition(2)\WINNT
@@ [operating systems]
@@ multi(0)disk(0)rdisk(0)partition(2)\WINNT="2 Windows NT Enterprise Server Ver
sion 4.00 org"
sion 4.00 org [VGA mode]" /basevideo /sos
sion 4.00 org Backup"
sion 4.00 org Backup [VGA mode]" /basevideo /sos
@@
@@ WinS03:
@@ [boot loader]
@@ timeout=3
@@ default=multi(0)disk(0)rdisk(0)partition(2)\WINNT
@@ [operating systems]
@@ multi(0)disk(0)rdisk(0)partition(2)\WINNT="Windows Server 2003 Enterprise" /f
astdetect
@@ multi(0)disk(0)rdisk(0)partition(2)\WINNT="Windows Server 2003 Enterprise [VG
A mode]" /basevideo /sos /noguiboot /bootlog /safeboot:minimal
@@ multi(0)disk(0)rdisk(0)partition(3)\WINNT="Windows Server 2003 Enterprise Bac
kup" /fastdetect
@@ multi(0)disk(0)rdisk(0)partition(3)\WINNT="Windows Server 2003 Enterprise Bac
kup [VGA mode]" /basevideo /sos /noguiboot /bootlog /safeboot:minimal
@@ C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
@@
@@-------------------------------------------------------------------------@@ Hardware dependent ACL checks
@IF {cdt} = YES THEN GOTO SKIP_ACL
@IF {hwver}="APG43" THEN GOSUB APG43_ACL
@IF {hwver}="APG40C/4" THEN GOSUB APG40_ACL
@IF {hwver} = "APG40C/2" THEN GOSUB APG40_ACL
@LABEL SKIP_ACL
@@-------------------------------------------------------------------------@@ Reason: To print the IntegrityAP Baseline.
@@
@IF {hwver}="APG43" THEN GOTO APG43_IntegrityAP
type C:\acs\data\fch\current\CXC1371063\IntegrityAP.dir
@GOTO IntegrityAP_END
@LABEL APG43_IntegrityAP
type C:\acs\data\fch\current\CXC1371132\IntegrityAP.dir
@LABEL IntegrityAP_END
type C:\WINNT\system32\IntegrityAP.dir
@@
@@ Expected result: Baseline
@@
@@-------------------------------------------------------------------------@@ Reason: To check if baseline files exist on this system
@@
dir C:\acs\logs\lct
@@ Expected result:
@@
11/16/05 03:59p
583,090 IntegrityAP.da2
@@
11/16/05 03:59p
312,671 IntegrityAP.dat
@@
@@-------------------------------------------------------------------------@@ Reason: To check that LCTBIN CNI 4-203 is implemented correct.
@@
cacls %Systemroot%\repair
@@ Expected result:
@@
NT AUTHORITY\SYSTEM:(OI)(CI)F
@@
BUILTIN\Administrators:(OI)(CI)F
@@
@@-------------------------------------------------------------------------@@ Reason: To check the contents of win.ini.
@@
type c:\winnt\win.ini
@@
@@ Expected result: APZ 212 40:
@@
----------@@
Mode=1002
@@
Server=1
@@
Directory=V:\APZ\data\BOOT
@@
Maximum Block Size=1450
@@
@@
APZ 212 30/33:
@@
-------------@@
Directory=c:\tftpboot
@@
Server=1
@@
Maximum Block Size=512
@@
Mode=1002
@@-------------------------------------------------------------------------@@ Reason: MS Diagnostic report.
@@
@IF {osver} = "WinS03" THEN GOTO NO_WINMSD
cd /d C:\TEMP && winmsd /a
@T 6
find "Free:" %computername%.txt
find "Handles" %computername%.txt
find "Service Account" %computername%.txt | find "\"
type %computername%.txt
@@
@@ Expected result: MS Diagnostic report
@@
Check Free/Total disk space,labels, number of Handles etc.
@@
Check that same service user runs the services.
@@
Passive node should only see disk C:\ D:\ E:\ F:\
@@
OSU: correct labels and in lower case only.
@@
OSU: If the any of the two points below isn't true this is a
n indication
@@
of that the labels might be incorrect. It must be investigat
ed in detail and
@@
if needed corrected before any attempt to start the repartit
ioning.
@@
(TR HG69453 and HG58613)
@@
@@
1. Sectors per cluster: 1 is ntserv
@@
Sectors per cluster: 4 is ntbackup
@@
@@
2. The line with "Total: 2,086,559 KB" is ntserv
@@
The line with "Total: 2,086,558 KB" is ntbackup
@@
@@
@@
OSU: Check required free disk space on E: 19 MByte (TR HG874
16).
@@
@@ examples:
@@
@@Drives Report
@@---------------------------------------------------------------------@@C:\ (Local - NTFS) ntbackup Total: 2,086,558 KB, Free: 305,108 KB
@@ Serial Number: DCD6 - D112
@@ Bytes per cluster: 512

@@ Sectors per cluster: 4
@@ Filename length: 255
@@D:\ (Local - NTFS) ntserv Total: 2,086,559 KB, Free: 1,156,650 KB
@@ Serial Number: 440C - 3067
@@E:\ (Local - NTFS) ntboot Total: 30,208 KB, Free: 27,741 KB
@@ Serial Number: 5C4F - 3ADC
@@F:\ (Local - NTFS) ntdump Total: 4,097,516 KB, Free: 4,049,360 KB
@@ Serial Number: C881 - 6A04
@@
@@
@@---------------------------------------------------------------------@@ Reason: Print the Service User profile (NT4).
@@
regedit /e C:\TEMP\ServiceUser.txt "HKEY_LOCAL_MACHINE\Software\Ericsson\Adjunct
Processor\ACS\lct"
type C:\TEMP\ServiceUser.txt
@SCAN {_line4} "=" {pos}
@SET {pos} = {pos}+2
@COPY {_line4}{serviceuser} {pos} 20
@COMMENT Service user={serviceuser}
dir /a C:\winnt\profiles\{serviceuser}
dir /a /s C:\winnt\profiles\{serviceuser}
@@
@@ Expected Result: Folders according to example below.
@@
@@ C:\temp>dir /a C:\winnt\profiles\GZYcVOiSHqSf1S7GY1AF
@@ Volume in drive C is ntserv
@@ Volume Serial Number is 5C0B-41E7
@@
@@ Directory of C:\winnt\profiles\GZYcVOiSHqSf1S7GY1AF
@@
@@ 03/30/06 01:55p
<DIR>
.
@@ 03/30/06 01:55p
<DIR>
..
@@ 03/30/06 01:55p
<DIR>
Application Data
@@ 03/30/06 01:55p
<DIR>
Cookies
@@ 03/30/06 01:55p
<DIR>
Desktop
@@ 03/30/06 01:55p
<DIR>
Favorites
@@ 03/30/06 01:55p
<DIR>
History
@@ 03/30/06 01:55p
<DIR>
Local Settings
@@ 03/30/06 01:55p
<DIR>
NetHood
@@ 03/31/06 08:58a
147,456 NTUSER.DAT
@@ 03/31/06 08:58a
1,024 ntuser.dat.LOG
@@ 03/30/06 01:55p
<DIR>
Personal
@@ 03/30/06 01:55p
<DIR>
PrintHood
@@ 03/30/06 01:55p
<DIR>
Recent
@@ 03/30/06 01:55p
<DIR>
SendTo
@@ 03/30/06 01:55p
<DIR>
Start Menu
@@ 03/30/06 01:55p
<DIR>
Templates
@@
17 File(s)
148,480 bytes
@@
@@
del C:\TEMP\%computername%.txt
cd /d C:\
@LABEL NO_WINMSD
@@-------------------------------------------------------------------------@@ Reason: Check setupservices.def
type C:\Winnt\system32\setupservice.def
@@ Expected result:
@@
@@ClusSvc
@@LBBAM_Service
@@# Start of lines belonging to CXC1371062 R5E BURBIN
@@burserver
@@# End of lines belonging to CXC1371062
@@# Start of lines belonging to CXC1371059 R2B PRCBIN
@@ACS_PRC_IspService
@@# Start of lines belonging to CXC137499 R4D SFCBIN
@@ACS_SFC_Recovery
@@# Start of lines belonging to CXC1371092 R1C ALOGBIN
@@ACS_ALOG_BufMan
@@ACS_ALOG_SysMon
@@ACS_ALOG_SecLog
@@# Start of lines belonging to CXC1371060 R1E FCHBIN
@@acs_fch_server
@@ Only present from AGM015:
@@# Start of lines belonging to CXC1371117 R1A FCRBIN
@@ACS_FCR_Server
@@# Start of lines belonging to CXC1371091 R2B NSFBIN
@@acs_nsf_server
@@
type C:\Winnt\system32\setupservice.def | findstr /v #
@@ Expected result:
@@ ClusSvc
@@ LBBAM_Service
@@ burserver
@@ ACS_PRC_IspService
@@ ACS_SFC_Recovery
@@ ACS_ALOG_BufMan
@@ ACS_ALOG_SysMon
@@ ACS_ALOG_SecLog
@@ acs_fch_server
@@ acs_nsf_server (from AGM015)
@@ ACS_FCR_Server (from AGM015)
@@
@@-------------------------------------------------------------------------@@ Reason: Check lct configuration of the service account
@@
cd /d c:\temp && regedit /e lct.txt "HKEY_LOCAL_MACHINE\SOFTWARE\Ericsson\Adjunc
t Processor\ACS\LCT"
type lct.txt && del lct.txt
@@ Expected result: The currently existing service account.
@@
Check that it correspond to the account used by the services
printed above.
@@
@@-------------------------------------------------------------------------@@ Reason: Check automatically started applications.

@@
cd /d c:\temp && regedit /e auto_HKLM.txt "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
\Windows\CurrentVersion\Run"
cd /d c:\temp && regedit /e auto_HKCU.txt "HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run"
cd /d c:\temp && regedit /e auto_HKU.txt "HKEY_USERS\.DEFAULT\Software\Microsoft
\Windows\CurrentVersion\Run"
type auto_HKLM.txt
type auto_HKCU.txt
type auto_HKU.txt
del auto_HK*.txt
@@ Expected result: To identify incorrect configured applications.
@@
@@-------------------------------------------------------------------------@@ Reason: Check workstation and server configuration.
@@
net config workstation
net config server
@@
@@ Expected result:
@@Computer name
\\[NODE NAME]
@@User name
Administrator
@@
@@Workstation active on
NetBT_E100B1 ([mac]) NetBT_E100B2 ([mac])
NetBT_E100B4 ([mac]) NetBT_E100E5 ([mac])
@@Software version
Windows NT 4.0
@@
@@Workstation domain
[DOMAIN NAME]
@@Logon domain
[DOMAIN NAME]
@@
@@COM Open Timeout (sec)
3600
@@COM Send Count (byte)
16
@@COM Send Timeout (msec)
250
@@
@@Server Name
\\[NODE NAME]
@@Server Comment
@@
@@Software version
Windows NT 4.0
@@Server is active on
NetBT_E100B1 ([mac]) NetBT_E100B1 ([mac]
) NetBT_E100B4 ([mac]) NetBT_E100B4 ([mac]) NetBT_E100B2 ([mac])
@@NetBT_E100B2 ([mac]) NetBT_E100E5 ([mac]) NetBT_E100E5 ([mac]) NetBt_If4 ([mac
]) NetBt_If2 ([mac])
@@
@@Server hidden
No
@@Maximum Logged On Users
Unlimited
@@Maximum open files per session
2048
@@
@@Idle session time (min)
15
@@-------------------------------------------------------------------------@@ Reason: To check the IP Configuration.
@@
ipconfig /all | findstr /I "Primary"
ipconfig /all
@@
@@ Expected result: Verify the settings on the adapters as shown below.
@@
@@ C:\>ipconfig /all
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
Windows NT IP Configuration
Host Name . . . . . . . . . : ap150a.uab.ericsson.se

DNS Servers . . . . . . . . : 134.138.226.13
134.138.201.17
Node Type . . . . . . . . . : Hybrid
NetBIOS Scope ID. . . . . . :
IP Routing Enabled. . . . . : No
WINS Proxy Enabled. . . . . : No
NetBIOS Resolution Uses DNS : No
Ethernet adapter E100B1:
Description . . . . . . . . : Intel(R) PRO Adapter

Physical Address. . . . . . : 00-80-42-13-BD-7D
DHCP Enabled. . . . . . . . : No
IP Address. . . . . . . . . : 192.168.200.1
Subnet Mask . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . :

Physical Address. . . . . . : 00-80-42-13-BD-80
IP Address. . . . . . . . . : 192.168.202.1
Subnet Mask . . . . . . . . : 255.255.255.0

Physical Address. . . . . . : 00-80-42-13-BD-7F
@@
@@
DHCP Enabled. . . . .
@@
@@
IP Address. . . . . .
@@
@@
Subnet Mask . . . . .
@@
@@
Default Gateway . . .
@@
@@
@@ Ethernet adapter E100B2:
@@
@@
@@
@@
Description . . . . .
@@
@@
Physical Address. . .
@@
@@
@@
@@
ly on active node)
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
Primary WINS Server .
@@
@@
Secondary WINS Server
@@
@@
@@ Ethernet adapter E100E5:
@@
@@
@@
@@
Description . . . . .
rnet
@@
@@
Physical Address. . .
@@
@@
@@
@@
e AP-1, .34 for AP-2)
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@ Ethernet adapter E100E6:
. . . : No
. . . : 192.168.201.1
. . . : 255.255.255.0
. . . :
. . . : Intel(R) PRO Adapter

. . . : 00-80-42-13-BD-7E
. . . : No
. . . : 134.138.168.171 (Cluster ip address, on
. . . : 255.255.252.0
. . . : 134.138.168.169
. . . : 255.255.252.0
. . . : 134.138.168.1
. . . : 153.88.194.201
. . . : 147.214.112.67
. . . : Intel D101ER-based Integrated Fast Ethe

. . . : 00-80-37-F2-59-90
. . . : No
. . . : 192.168.169.33 (SPOE only on active nod
. . . : 255.255.255.0
. . . : 192.168.169.1
. . . : 255.255.255.0
. . . :
@@
@@
@@
@@
Description . . . . . . . . : Intel D101ER-based Integrated Fast Ethe
rnet
@@
@@
Physical Address. . . . . . : 00-80-37-F2-59-91
@@
@@
@@
@@
IP Address. . . . . . . . . : 192.168.170.1
@@
@@
Subnet Mask . . . . . . . . : 255.255.255.0
@@
@@
@@
@@
@@-------------------------------------------------------------------------@@ Reason: To check that no extra network interfaces exist in registry.
@@
@IF {osver} = "NT4" THEN GOTO SKIPNIC
reg query HKLM\System\CurrentControlset\services\tcpip\parameters\interfaces
@@
@@ Expected result:
@@ Only 8 entries should be found: 6 NIC's and 2 WAN entries.
@@ More entries than that can cause unexpected behaviour.
@@ See Primus SCS736846 and TR HI94847 for more information
@@
@LABEL SKIPNIC
@@-------------------------------------------------------------------------@@ Reason: To check that speed and duplex are correct set on the NIC's.
@@
@IF {osver} = "NT4" THEN GOTO FORCEDPX
@@2K3
@@
regedit /e C:\temp\dupl.txt "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control
\Class\\{4D36E972-E325-11CE-BFC1-08002bE10318}"
type C:\temp\dupl.txt | findstr /I "DriverDesc SpeedDuplex RequestedMediatype" &
& del C:\temp\dupl.txt
@@
@@ Expected result:
@@"SpeedDuplex"="0"
@@Ref. Primus SCS645594
@GOTO ENDSPEED
@@
@LABEL FORCEDPX
@@NT4
regedit /e C:\temp\dupl.txt "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Service
s\E100B1"
@COMMENT E100B1
type C:\temp\dupl.txt | findstr /I "SpeedDuplex" | findstr /V PROSetNdi && del C
:\temp\dupl.txt
s\E100B2"
@COMMENT E100B2
:\temp\dupl.txt
s\E100B3"
@COMMENT E100B3

:\temp\dupl.txt
s\E100B4"
@COMMENT E100B4
:\temp\dupl.txt
s\E100E5"
@COMMENT E100E5
type C:\temp\dupl.txt | findstr /I "Speed ForceDpx" | findstr /V PROSetNdi && de
l C:\temp\dupl.txt
s\E100E6"
@COMMENT E100E6
type C:\temp\dupl.txt | findstr /I "Speed ForceDpx" | findstr /V PROSetNdi && de
l C:\temp\dupl.txt
@@
@@ Expected result:
@@"SpeedDuplex"=dword:00000000
@@"ForceDpx"=dword:00000000
@@"Speed"=dword:00000000
@@
@@SCS645594
@@
@LABEL ENDSPEED
@@-------------------------------------------------------------------------@@ Reason: To list the entries in the local IP routing table.
@@
route print
@@
@@ Expected result: Example below.
@@
@@ ===========================================================================
@@ Interface List
@@ 0x1 ........................... MS TCP Loopback interface
@@ 0x2 ...00 80 42 13 bd 7d ...... Intel(R) PRO Adapter
@@ 0x3 ...00 80 42 13 bd 80 ...... Intel(R) PRO Adapter
@@ 0x4 ...00 80 42 13 bd 7f ...... Intel(R) PRO Adapter
@@ 0x5 ...00 80 42 13 bd 7e ...... Intel(R) PRO Adapter
@@ 0x6 ...00 80 37 f2 59 90 ...... Intel D101ER-based Integrated Fast Ethernet
@@ 0x7 ...00 80 37 f2 59 91 ...... Intel D101ER-based Integrated Fast Ethernet
@@ ===========================================================================
@@ ===========================================================================
@@ Active Routes:
@@ Network Destination
Netmask
Gateway
Interface Metric
@@
0.0.0.0
0.0.0.0
134.138.168.1 134.138.168.169
1
@@
127.0.0.0
255.0.0.0
127.0.0.1
127.0.0.1
1
@@
134.138.168.0
255.255.252.0 134.138.168.169 134.138.168.169
1
@@ 134.138.168.169 255.255.255.255
127.0.0.1
127.0.0.1
1
@@ 134.138.255.255 255.255.255.255 134.138.168.169 134.138.168.169
1
@@
192.168.169.0
255.255.255.0
192.168.169.1 192.168.169.1
1
@@
192.168.169.1 255.255.255.255
127.0.0.1
127.0.0.1
1
@@
192.168.170.0
255.255.255.0
192.168.170.1 192.168.170.1
1
@@
192.168.170.1 255.255.255.255
127.0.0.1
127.0.0.1
1
@@
192.168.200.0
255.255.255.0
192.168.200.1 192.168.200.1
1
@@
192.168.200.1 255.255.255.255
127.0.0.1
127.0.0.1
1
@@ 192.168.200.255 255.255.255.255
192.168.200.1 192.168.200.1
1
@@
192.168.201.0
255.255.255.0
192.168.201.1 192.168.201.1
1
@@
192.168.201.1 255.255.255.255
127.0.0.1
127.0.0.1
1
@@ 192.168.201.255 255.255.255.255
192.168.201.1 192.168.201.1
1
@@
192.168.202.0
255.255.255.0
192.168.202.1 192.168.202.1
1
@@
192.168.202.1 255.255.255.255
127.0.0.1
127.0.0.1
1
@@ 192.168.202.255 255.255.255.255
192.168.202.1 192.168.202.1
1
@@
224.0.0.0
224.0.0.0 134.138.168.169 134.138.168.169
1
@@
224.0.0.0
224.0.0.0
192.168.169.1 192.168.169.1
1
@@
224.0.0.0
224.0.0.0
192.168.170.1 192.168.170.1
1
@@
224.0.0.0
224.0.0.0
192.168.200.1 192.168.200.1
1
@@
224.0.0.0
224.0.0.0
192.168.201.1 192.168.201.1
1
@@
224.0.0.0
224.0.0.0
192.168.202.1 192.168.202.1
1
@@ 255.255.255.255 255.255.255.255
192.168.200.1 192.168.200.1
1
@@ ===========================================================================
@@
@@-------------------------------------------------------------------------@@ Reason: OSU: To check that an up-to-date backup is available.
@@
and up-to-date backup archives exists on datadisk
@@
@@ alternative: type d:\burinfo.txt
@@
burverify -d
@IF {osver} = "NT4" THEN GOTO K_Images
@IF {hwver} = "APG43" THEN GOTO K_Images
dir /s M:\images
@GOTO NO_PASSIVE_8
@LABEL K_Images
dir /s K:\images
@LABEL NO_PASSIVE_8
dir /od c:\bur
dir /od C:\acs\data\BUR
@@
@@ Expected result:
@@ Imagename: cm312_apnnb
@@ Date:
10/19/04 4:32:46 PM
@@ Node:
APnnB
@@ Status:
OK (8948 files and 778 directories copied, 0 locked files)
@@
@@ OSU: No "big" ddi files should exist (Normal size ~50KByte)
@@
@@-------------------------------------------------------------------------@@ Reason: Make sure things in C:\ are ok.
@@
dir /A c:\
@@
@@ Expected result: No large temporary files.
@@
OSU: Check required free disk space
@@
Check that directory $oem$ and no other suspicious
@@
files or folders exist.
@@-------------------------------------------------------------------------@@ Reason: To list the C drive directory structure.
@@
tree C:\ /A
@@
@@ Expected result: Directory PATH listing for volume ntserv.
@@
@@-------------------------------------------------------------------------@@ Reason: To check the virus signature version.
@@
inocmd32 -sig
@@
@@ Expected result: The versions should be up-to-date.

@@
@@ InoculateIT Signature version: virsig.da0 23.67.35 2004/11/18
@@ Vet Signature version: vet.da1 11.07.8745 2004/11/19
@@
@@-------------------------------------------------------------------------@@ Reason: To check the antivirus exclusion settings.
@@Valid AVIRBIN CXC1371268/4 R1A APZ 212 30/4-1240
cd /d C:\temp && regedit /e antivir.txt "HKEY_LOCAL_MACHINE\Software\ComputerAss
ociates\eTrustITM\CurrentVersion\Realtime"
if exist antivir.txt type antivir.txt | find "szExcludeProcessNames"
if exist antivir.txt type antivir.txt | find "szExcludeDirs" && del antivir.txt
@@Valid AVIRBIN CXC1371065/4 R2D APZ21230/4-131
ociates\eTrustAntivirus\CurrentVersion\Realtime"
@@
ociates\InoculateIT\6.0\Realtime"
@@Valid for AVIRBIN CXC1371035/4 R1E APZ21220/5-1086 (China)
ociates\eTrustAntivirusInoculateIT\6.0\Realtime"
@@
@@ Expected result: Processes and partitions currently excluded.
@@ The example is valid for AVIRBIN CXC1371065/4 R2H APZ21230/4-371
@@
@@ Excluded Processes:
@@ "szExcludeProcessNames"="acs_msd_service|acs_rtr_service|acs_usa_sysloga|aes_
afp_server.|aes_cdh_server.|
@@ aes_dbo_server.|burServer.exe|cidaemon.exe|cps_busrv.exe|fms_cpf_server.|fosf
fc.exe|mcs_adh_adm.exe|
@@ mcs_mts_adm.exe|ntagent.exe|pes_clh_server.|rdt.exe|stsmain.exe|stsprov.exe"
@@
@@ Excluded Dirs
@@ "szExcludeDirs"="C:\\acs\\data\\Ftp\\mktrbuild|K:\\Images\\nodeA|K:\\Images\\
nodeB|L:\\FMS\\Data|Y:\\RDT"
@@
@@-------------------------------------------------------------------------@@ Reason: Check that A-node is PDC and that B-node is BDC in the domain
@@
and that domain related communication works between the nodes.
@IF {osver} = "WinS03" THEN GOTO ERNST
netdom query
netdom bdc
@LABEL ERNST
@@
@@ Expected result: NT4
@@ Netdom query command on A-node:
@@ ------------------------------@@
@@ NetDom 1.8 @1997-98. Written by Christophe Robert - Microsoft.
@@
@@ Querying domain information on computer \\WELOVEAPG40A ...
@@ Computer \\WELOVEAPG40A is a domain controller of WELOVEAPG40DOM.
@@ Searching PDC for domain WELOVEAPG40DOM ...
@@ Found PDC \\WELOVEAPG40A
@@ Connecting to \\WELOVEAPG40A ...

@@ Computer \\WELOVEAPG40A is the PDC of WELOVEAPG40DOM.
@@
@@ Netdom query command on B-node:
@@ ------------------------------@@
@@
@@ Querying domain information on computer \\WELOVEAPG40B ...
@@ Computer \\WELOVEAPG40B is a domain controller of WELOVEAPG40DOM.
@@ Verifying secure channel on \\WELOVEAPG40B ...
@@
@@ Secure channel established successfully with \\WELOVEAPG40A for domain WELOVE
APG40DOM.
@@
@@
@@ Netdom bdc command on A-node and B-node:
@@ ---------------------------------------@@
@@
@@ Listing BDCs of WELOVEAPG40DOM ...
@@
@@ BDC 1 = \\WELOVEAPG40B
@@
@@-------------------------------------------------------------------------@@ Reason: Display connections to shared network resources.
@@
net use
@@
@@ Expected result: No entries in the list.
@@
@@ New connections will be remembered.
@@
@@
@@ There are no entries in the list.
@@
@@ OSU: Mapped connections will only be listed for current user.
@@
If this AP Audit script is run with an account other than Administrator
(e.g. ossuser),
@@
'net use' should also be executed manually with the Administrator accoun
t.
@@-------------------------------------------------------------------------@@ Reason: Check information about all of the resources
@@
that are shared on the local computer.
@@
@@
net share
@@
@@ Expected result: Example printout from AC-M4225 system.
@@
@@ Share name Resource
Remark
@@
@@
@@ -----------------------------------------------------------------------------@@ E$
E:\
Default share
@@ ADMIN$
C:\WINNT
Remote Admin
@@ Q$
Q:\
Default share
@@ IPC$
Remote IPC
@@ R$
R:\
Default share
@@ C$
C:\
Default share
@@ S$
S:\
Default share
@@ D$
D:\
Default share
@@ Y$
Y:\
Default share
@@ L$
L:\
Default share
@@ F$
F:\
Default share
@@ V$
V:\
Default share
@@ G$
G:\
Default share
@@ K$
K:\
Default share
@@ J$
J:\
Default share
@@ M$
M:\
Default share
@@ Images
K:\Images
@@ NETLOGON
C:\WINNT\system32\Repl\Import\S Logon server share
@@ Share CPS
L:\
@@ Share FMS
L:\
@@ Share J
J:\
@@ Share K
K:\
@@ Share LOGS K:\
@@ Share MCS
M:\
@@ Share R
R:\
@@ Share S
S:\
@@ The command completed successfully.
@@
@@-------------------------------------------------------------------------@@ Reason: To check that all services expected to run really runs.
@@
net start
@@
@@ Expected result: A list of all running services.
@@
Do an extra check on that:
@@
ACS_FCH_server, Messenger, FTP server and AntiVirus
@@
services are running.
@@
@@ Example from an active node on AC-M4225 level.
@@
@@ These Windows NT services are started:
@@
@@
@@
ACS_ACSC_Logmaint
@@
ACS_ALH_EXEC
@@
ACS_ALOG_BufMan
@@
ACS_ALOG_Main
@@
ACS_ALOG_SecLog
@@
ACS_ALOG_SysMon
@@
ACS_CHB_ClockSyncService
@@
ACS_CHB_HeartBeatService
@@
ACS_DSD_service
@@
ACS_FCH_Server
@@
ACS_MSD_service
@@
ACS_MSD_service_1
@@
ACS_MSD_service_2
@@
ACS_MSD_service_3
@@
ACS_MSD_service_4
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
ACS_MSD_service_5
ACS_MSD_service_6
ACS_MSD_service_7
ACS_NSF_Server
ACS_PRC_ClusterControl
ACS_PRC_CountReboot
ACS_PRC_eva
ACS_PRC_IspLogger
ACS_PRC_LBB
ACS_RTR_service
ACS_RTR_service_1
ACS_RTR_service_2
ACS_RTR_service_3
ACS_RTR_service_4
ACS_RTR_service_5
ACS_RTR_service_6
ACS_RTR_service_7
ACS_SFC_Recovery
ACS_SSU_Monitor
ACS_USA_SyslogAnalyser
AES_AFP_server
AES_CDH_server
AES_DBO_server
Alerter
AM-Service
burServer
Cluster Server
Computer Browser
CPS_BUSRV
DisableInactiveUserAccountsService
Diskeeper
Distinct TFTP
DPTSRV
Ethernet NDIS
eTrust Antivirus Job Server
eTrust Antivirus Realtime Server
eTrust Antivirus RPC Server
EventLog
F-Secure SSH Server
FMS_CPF_server
FTP Publishing Service
gatherer
IIS Admin Service
InetD
Last Login Service
LBBAM Service
MAS_CPTASP_cptcentral
MAS_CPTASP_cptcentral_A
MAS_CPTASP_cptcentral_B
MAS_CPTASP_cptheartbeat
MCS_ADH_Adm
MCS_AIAP_Adm
MCS_ALDA_ADM
MCS_ALEC_ADM
MCS_ALIS_ADM
MCS_MTS_ADM
Messenger
Microsoft DHCP Server
Net Logon
NT LM Security Support Provider
@@
OCS_IPNAADM
@@
OCS_OCP_echo
@@
pcAnywhere Host Service
@@
PES_CLH_server
@@
Plug and Play
@@
Protected Storage
@@
Remote Procedure Call (RPC) Locator
@@
Remote Procedure Call (RPC) Service
@@
Server
@@
SoftWareListService
@@
Spooler
@@
stsmain
@@
stsopcf
@@
stsprov
@@
Task Scheduler
@@
TCP/IP NetBIOS Helper
@@
Workstation
@@
@@
@@-------------------------------------------------------------------------@@ Reason: Verify cached netbios names and lmhost entries matches.
@@
nbtstat -c
@@ Expected result: (NT4)
@@
NetBIOS Remote Cache Name Table
@@
@@
Name
Type
Host Address
Life [sec]
@@-------------------------------------------------------------------------@@
@@WELOVEAPG40DOM<1C> GROUP
192.168.202.1
-1
@@WELOVEAPG40DOM<1B> UNIQUE
192.168.202.1
-1
@@WELOVEAPG40B <03> UNIQUE
192.168.202.2
-1
192.168.202.2
-1
192.168.202.2
-1
@@WELOVEAPG40A <03> UNIQUE
192.168.202.1
-1
192.168.202.1
-1
192.168.202.1
-1
@@
type C:\winnt\system32\drivers\etc\lmhosts
@@ Expected result:
@@
@@192.168.202.1 AP143A #PRE
#DOM:AP143DOM
@@192.168.202.2 AP143B #PRE
#DOM:AP143DOM
@@192.168.202.1 "AP143DOM
\0x1b" #PRE
@@
@@ Note: The lmhosts file should not exist in WinS03
@@-------------------------------------------------------------------------@@Check content of hosts and compare them between A and B node
type c:\winnt\system32\drivers\etc\hosts
@@ Expected result: Classic
@@ 127.0.0.1
localhost
@@ # Start of lines belonging to CXC137442 R3D TOCAPBIN
@@ 192.168.169.1
ap1a-l1
ap1a
@@ 192.168.170.1
ap1a-l2
ap1a
@@ 192.168.169.2
ap1b-l1
ap1b
@@ 192.168.170.2
ap1b-l2
ap1b
@@
@@ 192.168.169.128
cp0ex-stoc0-l1 cp0ex cp0
@@ 192.168.170.128
cp0ex-stoc1-l2 cp0ex cp0
@@ 192.168.169.129
cp0sb-stoc0-l1 cp0sb
@@ 192.168.170.129
cp0sb-stoc1-l2 cp0sb
@@ # End of lines belonging to CXC137442
@@ 192.168.169.33 ap_1
@@ 192.168.169.33 app_apio
@@ 192.168.169.33 app_sts
@@ 192.168.169.33 app_gatherer_global
@@ 192.168.169.33 app_global_gatherer
@@
@@ Expected result: APZ 212 50
@@ 127.0.0.1
localhost
@@ # Start of lines belonging to CXC137442 R3L TOCAPBIN
@@ 192.168.169.1
ap1a-l1
ap1a
@@ 192.168.170.1
ap1a-l2
ap1a
@@ 192.168.169.2
ap1b-l1
ap1b
@@ 192.168.170.2
ap1b-l2
ap1b
@@
@@ 192.168.169.128
cp0ex-stoc0-l1 cp0-Aside
cp0ex cp0
@@ 192.168.170.128
cp0ex-stoc1-l2 cp0-Aside
cp0ex cp0
@@ 192.168.169.129
cp0sb-stoc0-l1 cp0-Bside
cp0sb
@@ 192.168.170.129
cp0sb-stoc1-l2 cp0-Bside
cp0sb
@@ # End of lines belonging to CXC137442
@@ 192.168.169.33 ap_1
@@ 192.168.169.33 app_apio
@@ 192.168.169.33 app_sts
@@ 192.168.169.33 app_global_gatherer
@@ 192.168.169.33 app_gatherer_global
@@
@@-------------------------------------------------------------------------@@ Reason: Check that the quorum logging is ok.
@@
@IF {osver} = "WinS03" THEN GOTO WinS_QUORUM
dir J:\MSCS
@GOTO NO_PASSIVE_9
@LABEL WinS_QUORUM
dir I:\MSCS
@@ Expected result: Only one quolog.log and one chk****.tmp should exist.
@@
@LABEL NO_PASSIVE_9
@@-------------------------------------------------------------------------@@ Reason: Check that everything in cluster is up and running.
@@
@IF {nodestate} = "undefined" THEN GOTO NO_PING
cluster res | findstr /vie online
@@ Expected result: Empty printout if all resources are online.
@@
cluster /ver
cluster /quorum
cluster /list
cluster node
cluster group
cluster res
@@ Recursive cluster res printing is not supported in WinFIOL versions older tha
n 7.0.1.
@IF {_version} = "wf" THEN GOTO contclus
@IF {_version} <= "700" THEN GOTO contclus
cluster res
@PASTE {clusterRes} {_lines}
@COMPACT {clusterRes}
@SIZE {clusterRes} {numRes}

@SET {indexRes} = 4
@WHILE {indexRes} < {numRes}
@BEFORE {clusterResource} {clusterRes[{indexRes}]} " "
@TRIM {clusterResource}
@AFTER {tmp} {clusterRes[{indexRes}]} {clusterResource}
@TRIM {tmp}
@BEFORE {clustergroup} {tmp} " "
@IF {clusterResource} MATCHES ".+RGAPM_0" THEN @SET {clustergroup}="RGAPM_0"
@IF {clusterResource} MATCHES ".+RGAPM_1" THEN @SET {clustergroup}="RGAPM_1"
@IF {clusterResource} MATCHES ".+RGAPM_[01]" THEN @BEFORE {clusterResource}
{clusterResource} " RGAPM"
@IF {clusterResource} MATCHES ".+Cluster Group" THEN @SET {clustergroup}="Cl
uster Group"
@IF {clusterResource} MATCHES ".+Cluster Group" THEN @BEFORE {clusterResourc
e} {clusterResource} " Cluster Group"
@IF {clusterResource} MATCHES ".+Disk Group" THEN @SET {clustergroup}="Disk
Group"
@IF {clusterResource} MATCHES ".+Disk Group" THEN @BEFORE {clusterResource}
{clusterResource} " Disk Group"
@IF {clusterResource} MATCHES ".+PMC860 Group" THEN @SET {clustergroup}="PMC
860 Group"
@IF {clusterResource} MATCHES ".+PMC860 Group" THEN @BEFORE {clusterResource
} {clusterResource} " PMC860 Group"
@COMMENT res="{clusterResource}", grp="{clustergroup}"
cluster res "{clusterResource}" /listowners
@INC {indexRes}
@ENDWHILE
@LABEL contclus
cluster res /prop
cluster res /priv
cluster netint
cluster netint /prop
cluster net /prop | sort | find "Role"
@@ Expected result:
@@
Cluster node: Status shall be UP
@@
Cluster group: Status shall be Online
@@
Cluster res: Status shall be Online
@@
@@ OSU: Check that both node names ends with 'A' or' B' in UPPERCASE.
@@ Node name must not contain _ (underscore).
@@ Otherwise the script will stop in the SelfTest execution, with "Error resolvi
ng
@@ node names by naming conventions" (Both nodes will be seen as BDC's.)
@@
@@ OSU:
@@ In WinNT4 it should look like this:
@@
@@ C:\>cluster net /prop | sort | find "Role"
@@ Heartbeat 1
Role
1 (0x1)
@@ Heartbeat 2
Role
1 (0x1)
@@ IPN100-1
Role
2 (0x2)
@@ IPN100-2
Role
2 (0x2)
@@ Local Maintenance
Role
2 (0x2)
@@ Public
Role
2 (0x2)
@@
@@ In W2K3 it should look like this (this is more useful for ALAN than anything
else):
@@
@@ c:\winnt\profiles\Administrator>cluster net /prop | sort | find "Role"
@@ D Heartbeat 1
Role
1 (0x1)
@@ D Heartbeat 2
Role
1 (0x1)
@@ D IPN100-1
Role
2 (0x2)
@@ D IPN100-2
Role
2 (0x2)
@@ D Local Maintenance
Role
2 (0x2)
@@ D Public
Role
2 (0x2)
@@
@@
@@ 1 = Internal cluster communications only (private network)
@@ 2 = Client access only (public network)
@@ 3 = All Communications (mixed network)
@@
@@-------------------------------------------------------------------------@@ Reason: Check that preferred owners are correct.
@@
cluster group RGAPM_0 /listowners
cluster group RGAPM_1 /listowners
cluster group "Disk Group" /listowners
cluster group "Cluster Group" /listowners
@IF {hwver} = "APG43" THEN GOTO NO_PMC860
cluster group "PMC860 Group" /listowners
@LABEL NO_PMC860
@@
@@ Expected result:
@@ Preferred Owner Nodes: RGAPM_0 -> A-node, RGAPM_1 -> B-node
@@ the other groups shall be empty.
@@-------------------------------------------------------------------------@@ Reason: OSU: Check the other nodes public network interface.
cluster netint /prop | find "Public" | find "Address"
@COPY {_line1}{ping1} 57 20
@IF {length1} = 0 THEN GOTO NO_PING
@IF {ping1} = "mapper." THEN GOTO NO_PING
@IF {length2} = 0 THEN SET {ping2}={ping3}
ping {ping1}
ping {ping2}
ping {ping1}
ping {ping2}
@@ Expected result: Lost = 0 (0% loss)
@LABEL NO_PING
@@-------------------------------------------------------------------------@@ Reason: Check that clustername and cluster ip-address works from both nodes.
cluster res "Cluster IP Address" /priv | find "Address A"
@IF {length1} = 0 THEN @GOTO NO_CLUS
@COPY {_line1}{pingu} 56 20
@IF {pingu} = " mapper." THEN GOTO NO_CLUIP
ping {pingu}
@GOTO NO_CLUIP
@LABEL NO_CLUS
cluster res "Cluster IP Address" /priv | find "Address"
@COPY {_line3}{pingu} 34 20
@IF {length3} = 0 THEN @GOTO NO_CLUIP
ping {pingu}
@LABEL NO_CLUIP
cluster /ver
@IF {length1} = 0 THEN GOTO NO_PONG
@COPY {_line1}{clustername} 18 32
ping {clustername}
@@ Expected result: Reply from both cluster name and cluster ip address
@@
Lost = 0 (0% loss)
@LABEL NO_PONG
@@-------------------------------------------------------------------------@@ Reason: OSU: SearchList must be empty before starting OSU.
cd /d C:\temp && regedit /e tcpip_parameters.log "HKEY_LOCAL_MACHINE\SYSTEM\Curr
entControlSet\Services\Tcpip\Parameters"
type C:\temp\tcpip_parameters.log | findstr SearchList && del C:\temp\tcpip_para
meters.log
@@
@@ Expected result: "SearchList"=""
@@-------------------------------------------------------------------------@@ Reason: To check the shutdown event tracker
@@
Reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Reliability
"
@@
@@ Expected result:
@@
@@
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Reliability
@@ ShutdownReasonOn
REG_DWORD
0x0
@@ SnapShot
REG_DWORD
0x1
@@-------------------------------------------------------------------------@@ Reason: To check for the reserved ports.
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
" /v ReservedPorts
@T 2
@@
@@ Expected result: Reserved port numbers 2345-2346
@@ IF port number 2345 - 2346 is not reserved then Primus SCS819024 have to be a
pplied.
@@-------------------------------------------------------------------------@@ Reason: To check the paths for FTP logs.
@@
dir c:\winnt\system32\LogFiles
@@
@@ Expected result: MSFTPSVC1 .....
@@
@@ To be compared with the settings in LOGMBIN CXC1371079/4 R1A
@@ Compare with phaprint to see that MAINTENANCE OF FTP LOGS is correct.
@@-------------------------------------------------------------------------@@ Reason: Check the alog status and list excluded items.
aloglist
alogexls
@@ Expected result:
@@STATUS
@@ACTIVE
@@
@@MAXIMUM LOGFILE SIZE
@@100 MB
@@
@@LOGGING PERIOD
@@2006-03-09 0024 2006-03-10 0026
@@
@@TRANSFER QUEUE
@@ALOG
@@
@LABEL NO_PASSIVE_15
@@-------------------------------------------------------------------------@@ Reason: To get the system parameters
@@
phaprint
@@
@@ Expected result: Parameter values.
@@-------------------------------------------------------------------------@@ Reason: To verify that messagestore and rtr are configured correctly.
@IF {mkah} <> "MML" THEN GOTO NO_MML_1
@@
@IF {bchwver} = "BC" THEN GOTO BC_APMSP_CHECK
mml APMSP;
mml CHOIP;CHOPP;
@GOTO BC_APMSP_END
@LABEL BC_APMSP_CHECK
mml -cp ALL APMSP;
@LABEL BC_APMSP_END
@@ Expected result: AP MESSAGE PROTOCOL TO AP STATISTICS DATA
@@
COMMON CHARGING OUTPUT INTERFACE DATA
@@
Interface should be AP
@@
@@-------------------------------------------------------------------------@@ Reason: To verify that messagestore and rtr are configured correctly.
@@
and to print acl's for responding ftp directories.
@LABEL NO_MML_1
@@
@IF {bchwver} <> "BC" THEN GOTO APG40_MSD
msdls -m CHS
rtrls
dir /s K:\ACS\data\ACA\
dir /s K:\ACS\Data\RTR
@GOTO NO_PASSIVE_10
@LABEL APG40_MSD
msdls -m CHS -s cp0ex
rtrls -s CHS cp0ex
@IF {hwver} <> "APG43" THEN GOTO APG40_MSDDRIVE
dir /s K:\ACS\data\ACA\CHS\cp0ex\
dir /s K:\ACS\Data\RTR
@GOTO NO_PASSIVE_10
@LABEL APG40_MSDDRIVE
dir /s Q:\ACS\data\ACA\CHS\cp0ex\
dir /s Y:\ACS\Data\RTR
vdls -n "Default FTP Site" | findstr -i Y:\Acs\Data\
@COPY {_line1}{resp1}25 50
@IF {length1} = 0 THEN GOTO NO_PASSIVE_10
@IF {length2} = 0 THEN GOTO NO_RESP1

@LABEL NO_RESP5
cacls {resp5}
cacls {resp5}\*
@LABEL NO_RESP4
cacls {resp4}
cacls {resp4}\*
@LABEL NO_RESP3
cacls {resp3}
cacls {resp3}\*
@LABEL NO_RESP2
cacls {resp2}
cacls {resp2}\*
@LABEL NO_RESP1
cacls {resp1}
cacls {resp1}\*
phaprint ACS_ACABIN_MSD_Home
phaprint -t ACS_ACABIN_MessageStores
phaprint ACS_RTRBIN_Home
@@
@@ Expected result: See examples below
@@Common part:
@@firstMessNo: {0000000000, 0051293764}
@@lastMessNo: {0000000000, 0051298729}
@@lastAckMess: {0000000000, 0051298582}
@@in file:
Q:\ACS\data\ACA\CHS\cp0ex\dataFiles\19307492_3
@@firstFile: 00046, lastFile:
00046, noOfFiles:
00001
@@maxNoOfMess: 06000, maxMessSize: 04096, maxNoOfFiles: 00040
@@
@@File part:
@@00000: fileName: Q:\ACS\data\ACA\CHS\cp0ex\dataFiles\19307492_3
@@
firstMessInFile: {0000000000, 0051293764}, noOfMess: 04966
@@
Unlinked: No, MTAPFileNo: 046
@@RTR TABLE
@@
@@MESSAGE STORE
FILE TRANSFER QUEUE
@@CHS
cp0ex
RTRFILES
@@
@@File size
4096
@@File holding time
300
@@Fixed file records
NO
@@File record length
2048
@@File padding char
0
@@Generation time
00:00
@@Reset flag
NO
@@
@@Statistics since
:03/17/2004 13:38:47
@@Process start
:04/26/2004 10:49:25
@@Volume read
(Kb)
:625878210
@@Volume reported (Kb)
:625878210
@@MS buffers read
:167622607
@@MS buffers lost
:0
@@MS buffers skipped
:0
@@Number of proc restarts :20
@@Conn attempts to MS
:57
@@Attach attempts to GOH
:19
@@
@@-------------------------------------------------------------------------@@ Reason: CPF FILE TABLE, AFP TABLE, CDH DESTINATION TABLE and
@@
CDH DESTINATION SET TABLE.
@@
@SET {cpfparam}=""
@IF {bchwver}="BC" THEN SET {cpfparam}="-cp cp0"
cpfdf {cpfparam}
cpfls {cpfparam} -l
afpls -l
cdhdsls -l
cdhls -l
dbols -l
@@
@@ Expected result: Files, Transfer queues, Destinations and
@@
Destination Sets(APZ 11.2) according to customers conf.
@@
@@-------------------------------------------------------------------------@@ Reason: afpls -a for all defined transferqueues, to get complete afp table de
finitions.
@@ Only executed if WinFiol 7.0 is used.
@@
@@
afpls
@IF {_version} = "wf" THEN GOTO endAFPLS
@IF {_version} <= "700" THEN GOTO endAFPLS
@@ Recursive AFPLS printing is not supported in WinFIOL versions older than 7.0.
1.
@PASTE {transferQueues} {_lines}
@COMPACT {transferQueues}
@SIZE {transferQueues} {numTransferQueues}
@SET {indexTQ} = 3
@WHILE {indexTQ} < {numTransferQueues}
@COPY {transferQueues[{indexTQ}]} {transferQueue} 1 32
@TRIM {transferQueue}
@COMMENT ###################################################################
###########
@COMMENT TRANSFER QUEUE: {transferQueue}
@COMMENT ###################################################################
###########
afpls -l {transferQueue}
@PASTE {destinationSets} {_lines}
@SIZE {destinationSets} {numDestinationSets}
@SET {indexDS} = 10
@WHILE {indexDS} < {numDestinationSets}-1
@ITEM {destinationSet} {destinationSets[{indexDS}]} " " 3
@TRIM {destinationSet}
@COMMENT TRANSFER QUEUE: {transferQueue}, DESTINATION SET: {destinationS
et}
afpls -a {transferQueue} {destinationSet}
@INC {indexDS}
@ENDWHILE
@INC {indexTQ}
@ENDWHILE
@LABEL endAFPLS
@@
@@-------------------------------------------------------------------------@@ Reason: To print rdt/ohs information. Note ! Only valid in APZ 11.1 (R9).
@@
swrprint RDTBIN | find /I "RDTBIN"

@COPY {_line1}{rdt}1 3
@IF {rdt} <> RDT THEN GOTO NO_RDT
rdtview -s
rdtview -f
rdtview -p
rdtview -b
type "c:\program files\ap\rdt\conf\cxc137567.par"
type "c:\program files\ap\ohs\conf\cxc137368.par"
type "c:\program files\ap\ohs\conf\cxc137571.rin"
type "c:\program files\ap\ohs\conf\cxc137572.rin"
@@
@@ Expected result: rdt/ohs configuration data
@@
@LABEL NO_RDT
@@-------------------------------------------------------------------------@@Reson: Check if HCS is present on the node and take the printout in AP1 active
node
@IF {nodestate} <> "active" THEN GOTO NO_HCS_PASSIVE
@IF {ap_no} <> "ap1" THEN GOTO NO_HCS_PASSIVE
swrprint HCSBIN | find /I "HCSBIN"
@COPY {_line1} {hcs} 1 3
@IF {hcs} <> HCS THEN GOTO NO_HCS_PASSIVE
hcrsls
hcrfls
hcjls
@LABEL NO_HCS_PASSIVE
@@-------------------------------------------------------------------------@@ Reason: Check the IO CONFIGURATION DATA.
@@
@IF {ap_no} = "ap2" THEN GOTO END_BUP
@IF {bchwver} = "BC" THEN GOTO BC_IOMSP_CHECK
mml IOMSP;
mml IOMSP:AP=1,ALL;
mml IOCDP;
@GOTO IOMSP_CHECK_END
@LABEL BC_IOMSP_CHECK
mml -cp ALL IOMSP;
mml -cp ALL IOMSP:AP=1,ALL;
mml -cp ALL IOCDP;
@LABEL IOMSP_CHECK_END
@@
@@ Expected result: All destinations are working and there is no
@@
queue on any AD.
@@
@@-------------------------------------------------------------------------@@ Reason: AP - CP group/user associations.
@@
cuals
@IF {bchwver} = "BC" THEN GOTO BC_IOTGP_CHECK
mml IOUAP:USER=ALL;IOUGP;IOTGP;
@GOTO BC_IOTGP_END
@LABEL BC_IOTGP_CHECK
mml -cp ALL IOTGP;
@LABEL BC_IOTGP_END
@@
@@ Expected result: Verify that AP group/user <-> CP user associations
@@
are OK.
@@
@@--------------------------------------------------------------------------
@@ Reason: IO DEVICE DATA LISTING.

@@
SYSTEM STANDBY DEVICE.
@@
@IF {bchwver} = "BC" THEN GOTO BC_IOROP_CHECK
mml IOROP;IOSYP;IOIOP:IO1=ALL;
@GOTO IOROP_CHECK_END
@LABEL BC_IOROP_CHECK
mml -cp ALL IOROP;IOSYP;IOIOP:IO1=ALL;
@LABEL IOROP_CHECK_END
@@
@@ Expected result: Only AD-devices should be used.
@@
@@-------------------------------------------------------------------------@@ Reason: Check what printout destinations are defined.
@@
cpdlist -l
cpdlist
@@
@@ Expected result: All destinations are working and there is no
@@
queue on any AD.
@@
@@-------------------------------------------------------------------------@@ Reason: IO Device in CP, Test.
@@
cpdtest -c
cpdtest -p
cpdtest -s
dir /s K:\MCS\logs\
type K:\MCS\logs\trace.log
@@
@@ Expected result: Test results, statistics and log.
@@
@@-------------------------------------------------------------------------@@ Reason: To check that valid SYSTEM BACKUP FILES exists in CPF.
@@
@IF {bchwver} = "BC" THEN GOTO BC_SYBRP_FILE_CHECK
mml SYBFP:FILE;
@GOTO BC_SYBRP_FILE_END
@LABEL BC_SYBRP_FILE_CHECK
mml -cp ALL SYBFP:FILE;
@LABEL BC_SYBRP_FILE_END
cpfls {cpfparam}| FindStr /R "RELFSW[0-9]"
cpfls {cpfparam} -ls RELFSW0
cpfls {cpfparam} -ls RELCMDHDF
@@
@@ Expected result: RELFSW0, RELFSW1 AND RELFSW2 should exist and the
@@
latest backup should be in RELFSW0.
@@
@@-------------------------------------------------------------------------@@ Reason: To get CP backup softvare info/status.
@@
@IF {cpno} = "CP not" THEN GOTO END_BUP
@IF {bchwver} = "BC" THEN GOTO BC_SYBRP_CHECK
mml SYBRP;
@GOTO BC_SYBRP_END
@LABEL BC_SYBRP_CHECK
mml -cp ALL SYBRP;
@LABEL BC_SYBRP_END
@IF {apzver} > "33" THEN GOTO _BUPLS

bupprint
@GOTO END_BUP
@LABEL _BUPLS
@IF {bchwver} = "BC" THEN GOTO BC_LAMIP_CHECK
mml LAMIP;
@GOTO BC_LAMIP_END
@LABEL BC_LAMIP_CHECK
mml -cp ALL LAMIP;
@LABEL BC_LAMIP_END
bupls
bupidls
@@
@@ Expected result:
@@ For APZ212 40 ->
@@ The printout from LAMIP should normally match RELFSW0 in bupidls.
@@ RPHMI MICRO PROGRAM IN PROM
@@ RPHMI FLASH LOAD MODULES
@@ SYSTEM BOOT IMAGE
@@ PLEX ENGINE DUMP
@@
@LABEL END_BUP
@@-------------------------------------------------------------------------@@ Reason: To verify if any external alarms are configured.
@@
exalls
exalls -l
exalls -f
@@
@@ Expected result: The defined receivers.
@@
@@-------------------------------------------------------------------------@@ Reason: To verify if any alarm panels alarms are configured.
@@
aldls
aldpls
@@
@@ Expected result: The defined panels.
@@
@@-------------------------------------------------------------------------@@ Reason: To verify that the DHCP database is consistent.
@IF {ap_no} = "ap2" THEN GOTO NO_DHCP
@@
@@ Reason: To check that no directory called "old" exist.
dir C:\WINNT\system32\dhcp\backup\Jet | findstr /I old
@@ Expected result: No directory called old should exist,if it does it must be r
emoved before an OSU is started.
@@
@@ Reason: To check that no corrupted dir's exist. (e.g. <DIR> j500000D.log)
dir C:\winnt\system32\dhcp /s /b /a /ad|findstr \.|findstr /v /r \..*\\|findstr
-v \\\.
@@ Expected result: Nothing printed. (files that turned into dir's)
@@
@IF {osver} = "WinS03" THEN GOTO NO_DHCP
@IF {nodestate} <> "active" THEN GOTO NO_DHCP_PASSIVE
dhcpcmd 127.0.0.1 enumclients 192.168.169.0 -v
dhcpcmd 127.0.0.1 enumclients 192.168.170.0 -v
@@ Note: Only the active node is checked.
dhcpcmd.exe 127.0.0.1 checkdb 192.168.169.0
dhcpcmd.exe 127.0.0.1 checkdb 192.168.170.0

@@
@@ Expected result:
@@ DHCP Server version 4.1
@@ Command successfully completed.
@LABEL NO_DHCP_PASSIVE
cd /d C:\temp && regedit /e dhcptmp.log "HKEY_LOCAL_MACHINE\SYSTEM\CurrentContro
lSet\Services\DHCPServer\Configuration\"
type C:\temp\dhcptmp.log | find "IpAddress"
type C:\temp\dhcptmp.log | find "ClientUID"
type C:\temp\dhcptmp.log | find "AllowedClientTypes"
del c:\temp\dhcptmp.log
cd /d C:\temp && regedit /e dhcptmp.log "HKEY_LOCAL_MACHINE\SYSTEM\CurrentContro
lSet\Services\DHCPServer\Parameters\"
type C:\temp\dhcptmp.log
del c:\temp\dhcptmp.log
@@
@@ Expected result: "AllowedClientTypes"=hex:03
@@
"IgnoreBroadcastFlag"=0 only for APZ 21240
@@
"IgnoreBroadcastflag"=1 all other APZ's (classic and also AP
Z 212 50/55)
@@
Before APZ 11.3 the flag doesn't exist.
@@
@@ Example below from AC-M315 APZ 212 40
@@
@@ dhcpcmd 127.0.0.1 enumclients 192.168.169.0 -v
@@ Num Client info read = 2.
@@ Total Client count = 2.
@@ ClientInfo :
@@
IP Address = 192.168.169.128.
@@
SubnetMask = 255.255.255.0.
@@
Client Hardware Address = 00-01-ec-c6-ee-e1.
@@
Name = eib_a.
@@
Comment = eib_a.
@@
Type = BOOTP
@@
Expires = Never (lease duration is infinite.)
@@
Owner Host IP Address = 192.168.169.2.
@@
Owner Host NetBios Name = AP143B.
@@
Owner Host Name = (null).
@@ ClientInfo :
@@
IP Address = 192.168.169.129.
@@
SubnetMask = 255.255.255.0.
@@
Client Hardware Address = 00-01-ec-c5-a2-91.
@@
Name = eib_b.
@@
Comment = eib_b.
@@
Type = None
@@
Expires = 01/01/1601 00:00:00.
@@
@@
@@
@@
@@ C:\>dhcpcmd 127.0.0.1 enumclients 192.168.170.0 -v
@@ Num Client info read = 2.
@@ Total Client count = 2.
@@ ClientInfo :
@@
IP Address = 192.168.170.128.
@@
SubnetMask = 255.255.255.0.
@@
Client Hardware Address = 00-01-ec-c6-ee-e2.
@@
Name = eic_b.
@@
Comment = eic_b.
@@
Type = None
@@
Expires = 01/01/1601 00:00:00.
@@
@@
@@
@@ ClientInfo :
@@
IP Address = 192.168.170.129.
@@
SubnetMask = 255.255.255.0.
@@
Client Hardware Address = 00-01-ec-c5-a2-90.
@@
Name = eib_b.
@@
Comment = eib_b.
@@
Type = BOOTP
@@
Expires = Never (lease duration is infinite.)
@@
@@
@@
@@
@@ "ServerIpAddress"=dword:7f000001
@@ "IpAddress"=dword:c0a8a980
@@ "IpAddress"=dword:c0a8a981
@@ "ServerIpAddress"=dword:7f000001
@@ "IpAddress"=dword:c0a8aa80
@@ "IpAddress"=dword:c0a8aa81
@@
@@ "ClientUID"=hex:00,a9,a8,c0,01,00,01,ec,c6,ee,e1
@@ "ClientUID"=hex:00,a9,a8,c0,01,00,01,ec,c5,a2,91
@@ "ClientUID"=hex:00,aa,a8,c0,01,00,01,ec,c6,ee,e2
@@ "ClientUID"=hex:00,aa,a8,c0,01,00,01,ec,c5,a2,90
@@
@@ "AllowedClientTypes"=hex:03
@@
@@
@@ Note:
@@ "AllowedClientTypes"=hex:03 means the DHCP Server accept requests from both
DHCP and BOOTP clients.
@@ Faulty setting can result in that CP reload or VM reload can fail.
@@ See Primus SCS570690 ("Howto: Change the value of AllowedClientTypes in the
DHCP Server settings in NT4")
@@
@LABEL NO_DHCP
@@-------------------------------------------------------------------------@@ Reason: Check the function change status and last history.
@@
@IF {nodestate} = "undefined" THEN GOTO FCHEND
@T 2
fchstate
@COPY {_line1}{fchrev}1 4
@IF {fchrev} = "The" THEN GOTO OLDFCH
@@fchstate -d
@IF {fchrev} = "This" THEN GOTO FCHEND
@LABEL OLDFCH
fchstart -V
@@type c:\acs\logs\fch\acs_fch_activity.log
@LABEL FCHEND
fchstart -j verify
@@
@@-------------------------------------------------------------------------@@ Reason: Check the soft function change status and last history.
@@
sfcstate
@@
@@type c:\acs\logs\sfc\ACS_SFC_InstallationLog | more
@@
@@ Expected result: sfc status and Log listed
@@
@@-------------------------------------------------------------------------@@ Reason: In Service Performance statistics print.
@@
ispprint -t {date}
ispprint -a -t {date}
@@
@@ Expected result: no unexpected process restarts or failovers
@@
@@-------------------------------------------------------------------------@@ Reason: To get (dr.watson log) and list saved/unsaved process dumps.
@@
@@type C:\acs\logs\core\drwtsn32.log
dir /s C:\user.dmp
dir F:\
dir /s /od F:\ACS\logs
@@
@@ Expected result: Logs and dumps listed
@@
@@-------------------------------------------------------------------------@@ Reason: List the STS configuration.
@IF {ap_no} = "ap2" THEN GOTO NO_PASSIVE_13
@@
@@ Measuring Program Print
stmmp -L -l
stmmp -L
@@ Measurement Report Print
stmrp -L
stmrp -L -l
@@ Object Types Print
stmotls
@@ Lists all output requests
stmfols
@@ Database Retainment Time Print
stmdbrt -p
@@
@@ Expected result: STS configuration data
@@
@@ Note: Large number of included but not reported object types should be
@@
investigated in detail together with the customer.
@@
@@
@@-------------------------------------------------------------------------@@ Reason: The Commondll- and dll log are only printed out for trouble shooting
@@
reasons.
@@
@@type C:\ACS\Logs\LCT\Commondll.log
@@@comment COMMOMDLL LOG FINISHED
@@type C:\ACS\Logs\LCT\dll.log
@@@comment COMMOMDLL LOG FINISHED
@@
@@ Expected result: The Commondll and dll logs are printed.
@@
@@-------------------------------------------------------------------------@@ Reason: Print MAXSIZE of the NT4 eventlogs.
@@
@IF {osver} = "WinS03" THEN GOTO WINS03_YES
cd /d c:\temp && regedit /e Appl.txt "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlS
et\Services\EventLog\Application"
cd /d c:\temp && regedit /e Syst.txt "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlS
et\Services\EventLog\System"
cd /d c:\temp && regedit /e Secu.txt "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlS
et\Services\EventLog\Security"
cd /d c:\temp && regedit /e Isp.txt "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet
\Services\EventLog\Isp"
type Appl.txt | find "MaxSize" && del Appl.txt
type Syst.txt | find "MaxSize" && del Syst.txt
type Secu.txt | find "MaxSize" && del Secu.txt
type Isp.txt | find "MaxSize" && del Isp.txt
dir /s "C:\winnt\system32\config\*.evt"
ispconf
dir C:\acs\logs\prc
@@ Expected result:
@@ C:\temp>type Appl.txt | find "MaxSize" && del Appl.txt
@@ "MaxSize"=dword:009d0000
(10048 KByte)
@@
@@ C:\temp>type Syst.txt | find "MaxSize" && del Syst.txt
(10048 KByte)
@@
@@ C:\temp>type Secu.txt | find "MaxSize" && del Secu.txt
(30080 KByte)
@@
@@ C:\temp>type Isp.txt | find "MaxSize" && del Isp.txt
@@ "MaxSize"=dword:00200000
(2048 Kbyte)
@@
@@ Directory of C:\winnt\system32\config
@@
@@ 05/21/07 06:21p
10,289,152 AppEvent.Evt
@@ 05/21/07 07:59p
1,114,112 IspEvent.Evt
@@ 05/21/07 06:21p
30,801,920 SecEvent.Evt
@@ 05/21/07 06:21p
2,228,224 SysEvent.Evt
@@
@@ ISP log maximum size is 2048 kbytes.
@@ Tr ref: http://mhweb.ericsson.se/mhweb/servlet/trview?trid=HH98939
@@-------------------------------------------------------------------------@IF {osver} = "NT4" THEN GOTO END_AUDIT
@@-------------------------------------------------------------------------@LABEL WINS03_YES
@@
@COMMENT Windows Server 2003 part
@@
@@-------------------------------------------------------------------------@@ Reason: To check the ipsec configuration.
@@
netsh ipsec static show all
netsh ipsec dynamic show config

@@
@@ Expected result: Ipsec configuration
@@
@@-------------------------------------------------------------------------@@ Reason: Insecure protocols status.
@@
@IF {nodestate} = "undefined" THEN GOTO NO_CSADM
csadm -s
@@
@@
@@ Expected result: Inbound connections using insecure protocols are blocked
@@
or
@@
Insecure protocols are allowed
@@
or
@@
Security configuration invalid.Reinitial
ise with command csadm accordingly
@LABEL NO_CSADM
@@-------------------------------------------------------------------------@@ Reason: To verify that no memory/handle leaks exist.
@@
To get memory configuration, allocation and usage info.
@@
To get pagefile info.
@@
wmic CPU GET Name,LoadPercentage,Status,StatusInfo,Level
wmic MEMLOGICAL GET AvailableVirtualMemory,TotalPageFileSpace,TotalPhysicalMemor
y,TotalVirtualMemory
wmic MEMPHYSICAL GET MaxCapacity,MemoryErrorCorrection
wmic PAGEFILE GET
tasklist
tasklist /SVC
wmic PROCESS GET Processid,Name,ThreadCount,HandleCount,Priority,PageFaults,Work
ingSetSize,QuotaNonPagedPoolUsage,QuotaPagedPoolUsage
wmic PROCESS GET Processid,Name,KernelModeTime,UserModeTime
wmic SERVICE GET displayname,name,startname,startmode,state
@@
@@ Expected result: Processor,process, services, memory and pagefile information
.
@@
@@-------------------------------------------------------------------------@@ Reason: Check the Volumes.
@@
wmic VOLUME GET BlockSize, Capacity, Compressed, DirtyBitSet, DriveLetter, FileS
ystem, FreeSpace, Label
@@
@@ Expected result: (Active Node)
@@
@@BlockSize Capacity
Compressed DirtyBitSet DriveLetter FileSystem Free
Space
Label
@@
@@512
30932992
FALSE
FALSE
E:
NTFS
1895
9872
ntboot
@@
@@4096
4195856384 FALSE
FALSE
C:
NTFS
6875
70944
ntbackup
@@
@@4096
4195856384 FALSE
FALSE
D:
NTFS
1585
561600 ntserv
@@
@@1024
1052834816 FALSE
FALSE
F:
NTFS
1040
470016 ntdump
@@
@@4096
2623827968 FALSE
FALSE
K:
NTFS
2582
175744 Disk K
@@
@@4096
10487230464 FALSE
FALSE
L:
NTFS
9931
243520 Disk L
@@
@@4096
5140799488 FALSE
FALSE
M:
NTFS
3437
150208 Disk M
@@
@@4096
4194856960 FALSE
FALSE
R:
NTFS
4168
855552 Disk R
@@
@@2048
2097444864 FALSE
FALSE
S:
NTFS
2083
944448 Disk S
@@
@@4096
8389783552 FALSE
FALSE
V:
NTFS
7936
909312 Disk V
@@
@@4096
2516934656 FALSE
FALSE
G:
NTFS
2056
646656 Disk G
@@
@@2048
2097412096 FALSE
FALSE
Q:
NTFS
2064
562176 Disk Q
@@
@@4096
14682124288 FALSE
FALSE
Y:
NTFS
1413
0991104 Disk Y
@@
@@512
106928128
FALSE
FALSE
I:
NTFS
1039
87200
Disk I
@@
@@-------------------------------------------------------------------------@@ Reason : To display the reservations
@@
@IF {ap_no} = "ap2" THEN GOTO NO_PASSIVE_17
@@
@@
netsh dhcp server scope 192.168.169.0 show clients 1
netsh dhcp server scope 192.168.170.0 show clients 1
@@
@@-------------------------------------------------------------------------@@
@@ Reason: To check the DHCP configuration.
@@
netsh dhcp show server
@@ Expected result:
@@ Example: APZ 212 33 with IPN.
@@ 2 Servers were found in the directory service:
@@
@@
Server [AP26A.AP26DOM.int] Address [192.168.169.1] Ds location: cn=19
2.168.169.1
@@
Server [AP26B.AP26DOM.int] Address [192.168.169.2] Ds location: cn=19
2.168.169.2
@@
netsh dhcp server show serverstatus
@@ Expected result:
@@ Server Status:
@@
@@ Server Attrib - Rogue Authorization Succeeded:
FALSE
@@ Server Attrib - Dynamic BootP Support Enabled:
TRUE
@@ Server Attrib - DHCP Server Part Of DS:
TRUE
@@ Server Attrib - DHCP Server Bindings Aware:
TRUE
@@ Server Attrib - Administrative Rights:
TRUE
@@
@@ The Server Attribute "Rogue Authorization Succeeded" should be TRUE.
@@ To rectify this, the duplicated Server Attribute needs to be deleted.
@@ See Primus SCS685644 for reference.
@@
@IF {ap_no} = "ap2" THEN GOTO NO_DHCP_AP2_2
netsh dhcp server scope 192.168.169.0 dump
@@
@@ Expected result:
@@ Dhcp Server 192.168.202.1 Scope 192.168.169.0 Add reservedip 192.168.169.128
49504e413030 "ipn0" "" ""
@@ Dhcp Server 192.168.202.1 Scope 192.168.169.0 set reservedoptionvalue 192.168
.169.128 66 STRING "192.168.169.1"
.169.128 67 STRING "boot.ipn0"
49504e413032 "ipn2" "" ""
.169.130 66 STRING "192.168.169.1"
@@
netsh dhcp server scope 192.168.170.0 dump
@@ Expected result:
49504e413031 "ipn1" "" ""
.170.128 66 STRING "192.168.170.1"
49504e413033 "ipn3" "" ""
.170.130 66 STRING "192.168.170.1"
@@
@@ Example: APZ 212 40 with GESP (CM013)
@@ C:\temp>netsh dhcp show server
@@
@@ 2 Servers were found in the directory service:
@@
@@
Server [AP155A.AP155DOM.int] Address [192.168.169.1] Ds location: cn=
192.168.169.1
@@
@@
Server [AP155B.AP155DOM.int] Address [192.168.169.2] Ds location: cn=
192.168.169.2
@@
@@
@@ Command completed successfully.
@@
@@ C:\temp>netsh dhcp server scope 192.168.169.0 dump
@@
@@ Changed the current scope context to 192.168.169.0 scope.
@@
@@ Dhcp Server 192.168.202.2 add scope 192.168.169.0 255.255.255.0 "ipna"
@@ Dhcp Server 192.168.202.2 Scope 192.168.169.0 set state 1
@@
@@
# ======================================================================
@@
# Start Add Ipranges to the Scope 192.168.169.0, Server 192.168.202.2
@@
# ======================================================================
@@
@@
@@ Dhcp Server 192.168.202.2 Scope 192.168.169.0 Add iprange 192.168.169.3 192.1
68.169.254 BOTH
@@
@@
# ======================================================================
@@
# End Add Ipranges to the Scope 192.168.169.0, Server 192.168.202.2
@@
# ======================================================================
@@
@@
@@
# ======================================================================
@@
# Start Add Excluderanges to the Scope : 192.168.169.0, Server : 192.168.
202.2
@@
# ======================================================================
@@
@@
@@
@@
# ======================================================================
@@
# End Add Excluderanges to the Scope : 192.168.169.0, Server : 192.168.
202.2
@@
# ======================================================================
@@
@@
@@
# ======================================================================
@@
# Start Add OptionValues to the Scope : 192.168.169.0, Server : 192.168.2
02.2
@@
# ======================================================================
@@
@@
@@ Dhcp Server 192.168.202.2 Scope 192.168.169.0 set optionvalue 66 STRING "192.
168.169.2"
@@ Dhcp Server 192.168.202.2 Scope 192.168.169.0 set optionvalue 51 DWORD "-1"
@@ Dhcp Server 192.168.202.2 Scope 192.168.169.0 set optionvalue 51 DWORD user="
Default BOOTP Class" "-1"
@@
@@
# ======================================================================
@@
# End Add OptionValues to the Scope : 192.168.169.0, Server : 192.168.2
02.2
@@
# ======================================================================
@@
@@
@@
# ======================================================================
@@
# Start Add ReservedIp to the Scope : 192.168.169.0, Server : 192.168.202
.2
@@
# ======================================================================
@@
@@
0001ecb1dd37 "eib_a" "CP-AP Lan1" "BOTH"
.169.128 67 STRING "image\boot_image_cpa"
008037ae87c7 "eic_b" "CP-AP Lan3" "BOTH"

.169.129 67 STRING "image\boot_image_cpb"
3235352e3235352e31352e313a65746830 "GESB-I-A" "Internal network plane A (eth0)"
"DHCP"
3235352e3235352e31352e32333a65746830 "GESB-I-B" "Internal network plane B (eth0)
" "DHCP"
3235352e3235352e31352e333a65746830 "GESB-E-A" "External network plane A (eth0)"
"DHCP"
3235352e3235352e31352e32313a65746830 "GESB-E-B" "External network plane B (eth0)
" "DHCP"
@@
@@
# ======================================================================
@@
# End Add ReservedIp to the Scope : 192.168.169.0, Server : 192.168.202
.2
@@
# ======================================================================
@@
@@
@@ C:\temp>netsh dhcp server scope 192.168.170.0 dump
@@
@@ Changed the current scope context to 192.168.170.0 scope.
@@
@@ Dhcp Server 192.168.202.2 add scope 192.168.170.0 255.255.255.0 "ipnb"
@@ Dhcp Server 192.168.202.2 Scope 192.168.170.0 set state 1
@@
@@
# ======================================================================
@@
# Start Add Ipranges to the Scope 192.168.170.0, Server 192.168.202.2
@@
# ======================================================================
@@
@@
@@ Dhcp Server 192.168.202.2 Scope 192.168.170.0 Add iprange 192.168.170.3 192.1
68.170.254 BOTH
@@
@@
# ======================================================================
@@
# End Add Ipranges to the Scope 192.168.170.0, Server 192.168.202.2
@@
# ======================================================================
@@
@@
@@
# ======================================================================
@@
# Start Add Excluderanges to the Scope : 192.168.170.0, Server : 192.168.
202.2
@@
# ======================================================================
@@
@@
@@
@@
# ======================================================================
@@
# End Add Excluderanges to the Scope : 192.168.170.0, Server : 192.168.
202.2
@@
# ======================================================================
@@
@@
@@
# ======================================================================
@@
# Start Add OptionValues to the Scope : 192.168.170.0, Server : 192.168.2
02.2
@@
# ======================================================================
@@
@@
@@ Dhcp Server 192.168.202.2 Scope 192.168.170.0 set optionvalue 66 STRING "192.

168.170.2"
@@ Dhcp Server 192.168.202.2 Scope 192.168.170.0 set optionvalue 51 DWORD "-1"
@@ Dhcp Server 192.168.202.2 Scope 192.168.170.0 set optionvalue 51 DWORD user="
Default BOOTP Class" "-1"
@@
@@
# ======================================================================
@@
# End Add OptionValues to the Scope : 192.168.170.0, Server : 192.168.2
02.2
@@
# ======================================================================
@@
@@
@@
# ======================================================================
@@
# Start Add ReservedIp to the Scope : 192.168.170.0, Server : 192.168.202
.2
@@
# ======================================================================
@@
@@
0001ecb1dd38 "eic_a" "CP-AP Lan2" "BOTH"
.170.128 67 STRING "image\boot_image_cpa"
008037ae87c6 "eib_b" "CP-AP Lan4" "BOTH"
.170.129 67 STRING "image\boot_image_cpb"
3235352e3235352e31352e313a65746831 "GESB-I-A" "Internal network plane A (eth1)"
"DHCP"
3235352e3235352e31352e32333a65746831 "GESB-I-B" "Internal network plane B (eth1)
" "DHCP"
3235352e3235352e31352e333a65746831 "GESB-E-A" "External network plane A (eth1)"
"DHCP"
3235352e3235352e31352e32313a65746831 "GESB-E-B" "External network plane B (eth1)
" "DHCP"
@@
@@
# ======================================================================
@@
# End Add ReservedIp to the Scope : 192.168.170.0, Server : 192.168.202
.2
@@
# ======================================================================
@@
@@
@@ C:\temp>REG QUERY HKLM\SYSTEM\CurrentControlSet\Services\DHCPServer\Parameter
s
@@
@@ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DHCPServer\Parameters
@@
APIProtocolSupport
REG_DWORD
0x5
@@
BackupDatabasePath
REG_SZ
C:\WINNT\System32\dhcp\backup
@@
BackupInterval
REG_DWORD
0x3c
@@
DatabaseCleanupInterval
REG_DWORD
0x3c
@@
DatabaseLoggingFlag
REG_DWORD
0x1
@@
DatabaseName
REG_SZ
dhcp.mdb
@@
DatabasePath
REG_SZ
C:\WINNT\System32\dhcp
@@
DebugFlag
REG_DWORD
0x0
@@
RestoreFlag
REG_DWORD
0x0
@@
DhcpLogFilesMaxSize
REG_DWORD
0x46
@@
DhcpLogFilePath
REG_SZ
C:\WINNT\System32\dhcp
@@
Version
REG_DWORD
0xece0205
@@
IgnoreBroadcastFlag
REG_DWORD
0x0
@@
DhcpLogDiskSpaceCheckInterval
REG_DWORD
0x32
@@
DhcpLogMinSpaceOnDisk
REG_DWORD
0x14
@@
DetectConflictRetries
REG_DWORD
0x0
@@
@@ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DHCPServer\Parameters\Co
nfiguration
@@ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DHCPServer\Parameters\Mu
ltiHomeInfo
@@
@@
@@ Note:
@@ ClientType BOTH means the DHCP Server accept requests from both DHCP and BOOT
P clients.
@@ Faulty setting can reusult in that CP reload or VM reload can fail.
@@ Scope and reservedip shall be type BOTH. Execpt reservedip's for GESB, they s
hall be type DHCP.
@@
@@-------------------------------------------------------------------------@@ Reason: Checking files can be fetched using TFTP
@@
@@ Checking the TFTP performance
@@
@IF {mkah} <> "MML" THEN GOTO TFTP_CHECK_BC
@IF {cpno} = "CP not" THEN GOTO TFTP_CHECK_BC
@IF {apzversion} = "2141" THEN GOTO TFTP_BC
@IF {apzversion} = "21255" THEN GOTO TFTP_APG43
@IF {apzver} = "40" THEN GOTO TFTP_CHECK_APZ40
@IF {apzver} = "50" THEN GOTO TFTP_CHECK_APZ50
@IF {apzversion} = "21260" THEN GOTO TFTP_CHECK_APZ60
@GOTO TFTP_CLASSIC
@@
@@ Checking for APZ version 60
@@
@LABEL TFTP_CHECK_APZ60
cd C:\temp
ptft -i 127.0.0.1 GET /image/a/pxelinux.0
attrib -r pxelinux.0
del pxelinux.0
ptft -i 127.0.0.1 GET /image/b/pxelinux.0
del pxelinux.0
@GOTO NO_PASSIVE_14
@@
@@ Checking Blade Cluster or not
@@
@LABEL TFTP_CHECK_BC
@IF {bchwver} = "BC" THEN GOTO TFTP_CLASSIC_BC
@GOTO TFTP_CLASSIC
@@
@@ Checking for BC CLASSIC Version
@@
@LABEL TFTP_CLASSIC_BC
cd C:\temp
del pxelinux.0
del pxelinux.0
@GOTO NO_PASSIVE_14
@@
@@ Classic Machine
@LABEL TFTP_CLASSIC
@@
@@ Checking for Classic APZ Version
@@
cd C:\temp
ptft -i 127.0.0.1 GET /boot.ipn0
ptft -i 127.0.0.1 GET /boot.ipn1
attrib -r boot.ipn0
attrib -r boot.ipn1
del boot.ipn0 boot.ipn1
@GOTO NO_PASSIVE_14
@@
@@ Checking for APZ version 40
@@
cd C:\temp
ptft -i 127.0.0.1 GET /image\boot_image_cpa
attrib -r boot_image_cpa
del boot_image_cpa
ptft -i 127.0.0.1 GET /image\boot_image_cpb
attrib -r boot_image_cpb
del boot_image_cpb
@GOTO NO_PASSIVE_14
@@
@@ Checking for APZ Version 50
@@
cd C:\temp
ptft -i 127.0.0.1 GET /image/a/elilo.efi
attrib -r elilo.efi
del elilo.efi pxelinux.0
ptft -i 127.0.0.1 GET /image/b/elilo.efi
attrib -r elilo.efi
del elilo.efi pxelinux.0
@GOTO NO_PASSIVE_14
@@
@@ Checking for APZ Version 55
@@
@LABEL TFTP_APG43
cd C:\temp
del pxelinux.0
del pxelinux.0
@GOTO NO_PASSIVE_14
@@
@@ Checking for APZ Version 21401 (Blade Cluster)
@@
@LABEL TFTP_BC
cd C:\Temp
@@
@@Checking Dual CPs related TFTP services
@@
@SET {count} = 1
@WHILE {count} <= {DCP1}
@CONCAT {BCDCP} "CP" {count}
ptft -i 127.0.0.1 GET /{BCDCP}/CPA/pxelinux.0
del pxelinux.0
ptft -i 127.0.0.1 GET /{BCDCP}/CPB/pxelinux.0
del pxelinux.0
@INC {count}
@ENDWHILE
@@
@@ Checking Single CPs related TFTP Services
@@
@SET {count} = 0
@WHILE {count} < {SCP1}
@CONCAT {BCSCP} "BC" {count}
ptft -i 127.0.0.1 GET /{BCSCP}/CPA/pxelinux.0
del pxelinux.0
@INC {count}
@ENDWHILE
@@
@@ Expected Result : The files will be transfered through TFTP.
@@
@@
@@
REG QUERY HKLM\SYSTEM\CurrentControlSet\Services\DHCPServer\Parameters
@@
@@ Expected result: DHCP configuration
@@
"IgnoreBroadcastFlag 0x0" only for APZ 21240
@@
"IgnoreBroadcastFlag 0x1" all other APZ's (classic and also
APZ 212 50/55)
@LABEL NO_DHCP_AP2_2
@@-------------------------------------------------------------------------@@ Reason: Print MAXSIZE of the WINS03 eventlogs.
wmic NTEVENTLOG LIST /FORMAT:LIST
@@
@@ Expected result:
@@ LogfileName=Application, MaxFileSize=16777216
@@ LogfileName=Directory Service, MaxFileSize=15728640
@@ LogfileName=DNS Server, MaxFileSize=15728640
@@ LogfileName=File Replication Service, MaxFileSize=15728640
@@ LogfileName=ISP, MaxFileSize=2097152
@@ LogfileName=Security, MaxFileSize=31457280
@@ LogfileName=System, MaxFileSize=16777216
@@
@@-------------------------------------------------------------------------@@ Reason: System Information report
cd /d C:\TEMP
diagproc
type winmsdreport.txt
del C:\TEMP\winmsdreport.txt
type diagproc.txt
del C:\TEMP\diagproc.txt
cd /d C:\
@@-------------------------------------------------------------------------@@ Reason: Operating system configuration information report.

systeminfo
@@-------------------------------------------------------------------------@@ Reason: Print the Service User profile (WinS03).
@@
regedit /e C:\TEMP\ServiceUser.txt "HKEY_LOCAL_MACHINE\Software\Ericsson\Adjunct
Processor\ACS\lct"
@T 2
type C:\TEMP\ServiceUser.txt
@SCAN {_line4} "=" {pos}
@COPY {_line4}{serviceuser} {pos} 20
@COMMENT Service user={serviceuser}
dir /a C:\winnt\profiles\{serviceuser}
dir /a /s C:\winnt\profiles\{serviceuser}
@@
@@ Expected Result: Folders according to example below.
@@ C:\temp>dir /a C:\winnt\profiles\MZxDXMoNPWBNKyEYDVKS
@@ Volume in drive C is ntserv
@@ Volume Serial Number is F005-D27B
@@
@@ Directory of C:\winnt\profiles\MZxDXMoNPWBNKyEYDVKS
@@
@@ 03/22/2006 09:21 AM
<DIR>
.
@@ 03/22/2006 09:21 AM
<DIR>
..
@@ 06/13/2006 03:42 PM
<DIR>
Application Data
@@ 03/23/2005 12:20 PM
<DIR>
Cookies
@@ 03/23/2005 12:59 PM
<DIR>
Desktop
@@ 01/11/2006 03:05 PM
<DIR>
Favorites
@@ 03/23/2005 12:59 PM
<DIR>
Local Settings
@@ 01/11/2006 03:05 PM
<DIR>
My Documents
@@ 03/23/2005 12:59 PM
<DIR>
NetHood
@@ 06/15/2006 01:37 PM
524,288 NTUSER.DAT
@@ 06/15/2006 01:43 PM
8,192 ntuser.dat.LOG
@@ 06/15/2006 01:37 PM
180 ntuser.ini
@@ 03/23/2005 12:59 PM
<DIR>
PrintHood
@@ 01/11/2006 03:05 PM
<DIR>
Recent
@@ 04/01/2005 07:24 PM
<DIR>
SendTo
@@ 03/23/2005 12:59 PM
<DIR>
Start Menu
@@ 03/23/2005 01:04 PM
0 Sti_Trace.log
@@ 03/23/2005 12:59 PM
<DIR>
Templates
@@
4 File(s)
532,660 bytes
@@
14 Dir(s)
@@
cd /d C:\
@@-------------------------------------------------------------------------@@ Reason: DNS should not be configured to listen on the Public interface.
netstat -an | find ":53 "
@@ Expected result: Public ip must not be listed.
@@
@@ Expected "good" printout:
@@ TCP
127.0.0.1:53
0.0.0.0:0
LISTENING
@@ TCP
192.168.169.1:53
0.0.0.0:0
LISTENING
@@ TCP
192.168.202.1:53
0.0.0.0:0
LISTENING
@@ UDP
127.0.0.1:53
*:*
@@ UDP
192.168.169.1:53
*:*
@@ UDP
192.168.202.1:53
*:*
@@
@@ No occurrences of node A or B public ip addresses should appear in the list.
@@-------------------------------------------------------------------------@@ Reason: Check that A-node is PDC and that B-node is BDC in the domain
@@
and that domain related communication works between the nodes.
netdom query DC
netdom query PDC
netdom query FSMO
@@
@@ ---------------------------------------@@ Expected result: WinS03
@@
@@ C:\>netdom query DC
@@ List of domain controllers with accounts in the domain:
@@ AP165BAP165AThe command completed successfully.
@@
@@ C:\>netdom query PDC
@@ Primary domain controller for the domain:
@@ AP165AThe command completed successfully.
@@
@@ C:\>netdom query FSMO
@@ Schema owner
AP165A.AP165DOM.INT
@@ Domain role owner
AP165A.AP165DOM.INT
@@ PDC role
AP165A.AP165DOM.INT
@@ RID pool manager
AP165A.AP165DOM.INT
@@ Infrastructure owner
AP165A.AP165DOM.INT
@@-------------------------------------------------------------------------@@ Reason: DNS Server configuration.
which dnscmd.exe
@SCAN {_line1} "not found" {DNSCMD}
@IF {DNSCMD} <> 0 THEN GOTO NO_DNSCMD
dnscmd /Info
@@
@@ Expected result: DNS Server configuration.
@@
@@ Example:
@@ Query result:
@@ Server info
@@
server name
= AP206B.AP206DOM.INT
@@
version
= 0ECE0205 (5.2 build 3790)
@@
DS container
= cn=MicrosoftDNS,cn=System,DC=ap206dom,DC=i
nt
@@
forest name
= ap206dom.int
@@
domain name
= ap206dom.int
@@
builtin domain partition = ForestDnsZones.ap206dom.int
@@
builtin forest partition = DomainDnsZones.ap206dom.int
@@
last scavenge cycle
= not since restart (0)
@@ Configuration:
@@
dwLogLevel
= 00000000
@@
dwDebugLevel
= 00000000
@@
dwRpcProtocol
= FFFFFFFF
@@
dwNameCheckFlag
= 00000002
@@
cAddressAnswerLimit
= 0
@@
dwRecursionRetry
= 3
@@
dwRecursionTimeout
= 15
@@
dwDsPollingInterval
= 180
@@ Configuration Flags:
@@
fBootMethod
= 3
@@
fAdminConfigured
= 1
@@
fAllowUpdate
= 1
@@
fDsAvailable
= 1
@@
fAutoReverseZones
= 1
@@
fAutoCacheUpdate
= 0
@@
fSlave
= 0
@@
fNoRecursion
= 0
@@
fRoundRobin
= 0
@@
fStrictFileParsing
= 0
@@
fLooseWildcarding
= 0
@@
fBindSecondaries
= 1
@@
fWriteAuthorityNs
= 0
@@
fLocalNetPriority
= 1
@@ Aging Configuration:
@@
ScavengingInterval
= 0
@@
DefaultAgingState
= 0
@@
DefaultRefreshInterval
= 168
@@
DefaultNoRefreshInterval
= 168
@@ ServerAddresses:
@@ Addr Count = 8
@@
@@
Addr[0] => 192.168.202.2
@@
@@
Addr[1] => 192.168.169.2
@@
@@
Addr[2] => 134.138.169.210
@@
@@
Addr[3] => 192.168.201.2
@@
@@
Addr[4] => 192.168.170.2
@@
@@
Addr[5] => 192.168.200.1
@@
@@
Addr[6] => 192.168.169.33
@@
@@
Addr[7] => 134.138.169.211
@@
@@ ListenAddresses:
@@ Addr Count = 2
@@
@@
Addr[0] => 192.168.202.2
@@
@@
Addr[1] => 192.168.169.2
@@
@@ Forwarders:
@@ Addr Count = 2
@@
@@
Addr[0] => 134.138.201.17
@@
@@
Addr[1] => 134.138.226.13
@@
@@
forward timeout = 10
@@
slave
= 0
@@ Command completed successfully.
@@
@LABEL NO_DNSCMD
@@-------------------------------------------------------------------------@@ Reason: Active Directory Replication
@@
(see also Primus SCS578050 and SCS578518)
@@
@@ Check NTDS, Configuration data for Active Directory.
@@
reg query \\{NODEA}\HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters
@COPY {_line1}{crap} 1 80
@LENGTH {_line1}{length}
@IF {length} <> 0 THEN GOTO NO_REG
@COPY {_line4}{rootA} 29 100
@COPY {_line5}{CNCA} 30 150
@COPY {_line6}{MDNA} 30 150
@@
reg query \\{NODEB}\HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters
@COPY {_line1}{crap} 1 80
@IF {length} <> 0 THEN GOTO NO_REG
@SCAN {_line5} "Root Domain" {pos}
@IF {pos}=0 THEN GOTO LR1
@COPY {_line5}{rootB} 29 100
@COPY {_line6}{CNCB} 30 150
@COPY {_line7}{MDNB} 30 150
@GOTO LR2
@LABEL LR1
@COPY {_line6}{rootB} 29 100
@COPY {_line7}{CNCB} 30 150
@COPY {_line8}{MDNB} 30 150
@LABEL LR2
@COMMENT ---------------------------------------------------------@COMMENT A-ROOTDOMAIN: {rootA}
@COMMENT B-ROOTDOMAIN: {rootB}
@COMMENT A-Configuration NC: {CNCA}
@COMMENT B-Configuration NC: {CNCB}
@COMMENT A-Machine DN Name: {MDNA}
@COMMENT B-Machine DN Name: {MDNB}
@COMMENT ---------------------------------------------------------@@
@@ Expected result: correct domain/node in both nodes, see example below.
@@
@@ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters
@@
System Schema Version
REG_DWORD
0x1e
@@
Root Domain
REG_SZ
DC=AP206DOM,DC=INT
@@
Configuration NC
REG_SZ
CN=Configuration,DC=AP206DOM,DC=INT
@@
Machine DN Name
REG_SZ
CN=NTDS Settings,CN=AP206A,CN=Servers,CN=Def
ault-First-Site-Name,CN=Sites,CN=Configuration,DC=AP206DOM,DC=INT
@@
DSA Working Directory
REG_SZ
C:\WINNT\NTDS
@@
DSA Database file
REG_SZ
C:\WINNT\NTDS\ntds.dit
@@
Database backup path
REG_SZ
C:\WINNT\NTDS\dsadata.bak
@@
Database log files path
REG_SZ
C:\WINNT\NTDS
@@
Hierarchy Table Recalculation interval (minutes)
REG_DWORD
0x2d0
@@
Database logging/recovery
REG_SZ
ON
@@
DS Drive Mappings
REG_MULTI_SZ
c:\=\\?\Volume{971ae065-3288-11db-bb
9c-806e6f6e6963}\
@@
Performance Counter Version
REG_DWORD
0x11
@@
Strict Replication Consistency
REG_DWORD
0x1
@@
Schema Version
REG_DWORD
0x1e
@@
ldapserverintegrity
REG_DWORD
0x1
@@
Global Catalog Promotion Complete
REG_DWORD
0x1
@@
@@ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters
@@
ldapserverintegrity
REG_DWORD
0x1
@@
Src Srv objectGuid
REG_BINARY
B26B5600D483CD49B18AFFA0C83A9FE5
@@
System Schema Version
REG_DWORD
0x1e
@@
Root Domain
REG_SZ
DC=ap206dom,DC=INT
@@
Configuration NC
REG_SZ
CN=Configuration,DC=ap206dom,DC=INT
@@
Machine DN Name
REG_SZ
CN=NTDS Settings,CN=AP206B,CN=Servers,CN=Def
ault-First-Site-Name,CN=Sites,CN=Configuration,DC=ap206dom,DC=INT
@@
Src Root Domain Srv
REG_SZ
AP206A.ap206dom.int
@@
DSA Working Directory
REG_SZ
C:\WINNT\NTDS
@@
DSA Database file
REG_SZ
C:\WINNT\NTDS\ntds.dit
@@
Database backup path
REG_SZ
C:\WINNT\NTDS\dsadata.bak
@@
Database log files path
REG_SZ
C:\WINNT\NTDS
@@
Hierarchy Table Recalculation interval (minutes)
REG_DWORD
0x2d0
@@
Database logging/recovery
REG_SZ
ON
@@
DS Drive Mappings
REG_MULTI_SZ
c:\=\\?\Volume{5cafbc35-3288-11db-bd
5b-806e6f6e6963}\
@@
Performance Counter Version
REG_DWORD
0x11
@@
Strict Replication Consistency
REG_DWORD
0x1
@@
Schema Version
REG_DWORD
0x1e
@@
@GOTO REG_FOUND
@LABEL NO_REG
@COMMENT ROUTINE NTDS SKIPPED: {crap}
@LABEL REG_FOUND
@@
@@ ## ---------------------------------------------------------@@ ## A-ROOTDOMAIN: AP206DOM,DC=INT
@@ ## B-ROOTDOMAIN: ap206dom,DC=INT
@@ ## A-Configuration NC: CN=Configuration,DC=AP206DOM,DC=INT
@@ ## B-Configuration NC: CN=Configuration,DC=ap206dom,DC=INT
@@ ## A-Machine DN Name: CN=NTDS Settings,CN=AP206A,CN=Servers,CN=Default-FirstSite-Name,CN=Sites,CN=Configuration,DC=AP206DOM,DC=INT
@@ ## B-Machine DN Name: CN=NTDS Settings,CN=AP206B,CN=Servers,CN=Default-FirstSite-Name,CN=Sites,CN=Configuration,DC=ap206dom,DC=INT
@@ ## ---------------------------------------------------------@@
@@
@@ Check frconfig build and success
@IF {hwver}="APG43" THEN GOTO NO_FRCONFIG
@COMMENT A-Node
type "\\192.168.202.1\C$\Program Files\Force\frconfig"\FrConfig.log | Findstr /I
/C:"failed on node" /C:succesful /C:build
@@ Expected result:
@@ 08/23/2006 13:39:21 > INFO - FrConfig v1.4.0 (build 3) started
@@ 08/23/2006 15:42:47 > INFO - Parameter change completed succesfully on node
AP206A
@@
@COMMENT B-Node
type "\\192.168.202.2\C$\Program Files\Force\frconfig"\FrConfig.log | Findstr /I
/C:"failed on node" /C:succesful /C:build
@@ Expected result:
@@ 08/23/2006 13:54:27 > INFO - FrConfig v1.4.0 (build 3) started
@@ 08/23/2006 15:43:51 > INFO - Parameter change completed succesfully on node
AP206B
@@
@LABEL NO_FRCONFIG
@@ Check that the replication is working
where /R C:\ repadmin.exe
@COPY {_line1}{repadmin_path} 1 70
@COPY {repadmin_path} {repinfo} 1 5
@IF {repinfo}=INFO: THEN @COMMENT repadmin.exe not found on this system.
@IF {repinfo}=INFO: THEN @GOTO NO_USN
@@
dsquery computer
dsquery computer|findstr /i /c:"Domain Controllers"
@SCAN {_line1} ",OU" {OU}
@IF {OU} = 0 THEN GOTO NO_USN

@SET {OU} = {OU}-5
@COPY {_line1}{AAA} 5 {OU}
@SCAN {_line2} ",OU" {OU}
@IF {OU} = 0 THEN GOTO NO_USN
@SET {OU} = {OU}-5
@COPY {_line2}{BBB} 5 {OU}
@SCAN {_line1} ",DC=" {pos}
@SET {length} = {length}-{pos}
@COPY {_line1}{DCA} {pos} {length}
@SCAN {_line2} ",DC=" {pos}
@SET {length} = {length}-{pos}
@COPY {_line2}{DCB} {pos} {length}
@@
@@ Verify replication A-node
"{repadmin_path}" /options {AAA}
@@verify replication B-node
"{repadmin_path}" /options {BBB}
@@
"{repadmin_path}" /showrepl {AAA}
"{repadmin_path}" /showrepl {BBB}
"{repadmin_path}" /replsummary
@@
@@ IS_GC = domain controller is a Global Catalog server (Only A-node)
@@
@@ Verify that USNs are OK, All time should be close (see Time in example)
"{repadmin_path}" /showutdvec {AAA} {DCA}
"{repadmin_path}" /showutdvec {BBB} {DCB}
@@
@@ "C:\Program Files\FORCE\frconfig\DomainRename\"repadmin /showutdvec apg40a dc
=apg40dom,dc=test,dc=com
@@ Caching GUIDs.
@@ ..
@@ Default-First-Site-Name\APG40B @ USN
193753 @ Time 2006-07-18 15:27:31
@@ Default-First-Site-Name\APG40A @ USN
225305 @ Time 2006-07-18 15:29:17
@@
@@
@@ "C:\Program Files\FORCE\frconfig\DomainRename\"repadmin /showutdvec apg40b dc
=apg40dom,dc=test,dc=com
@@ Caching GUIDs.
@@ ..
@@ Default-First-Site-Name\APG40B @ USN
193766 @ Time 2006-07-18 15:29:15
@@ Default-First-Site-Name\APG40A @ USN
225339 @ Time 2006-07-18 15:29:17
@@
@@
@@ If the time are not close to each other between A- and B-Node (less than one
hour),
@@ then Primus SCS578518 will need to be applied.
@@-------------------------------------------------------------------------@@ Reason: Extended Active Directory check.
@@
dsquery * -s {AAA} -limit 0 | sort >c:\temp\ad_nodea.txt
dsquery * -s {BBB} -limit 0 | sort >c:\temp\ad_nodeb.txt
fc c:\temp\ad_nodea.txt c:\temp\ad_nodeb.txt
del c:\temp\ad_nodea.txt c:\temp\ad_nodeb.txt
@@
@@ Expected result:
@@ Comparing files C:\TEMP\ad_nodea.txt and C:\TEMP\AD_NODEB.TXT
@@ FC: no differences encountered
@@-------------------------------------------------------------------------@@ Reason:check the age of the password
dsquery computer -stalepwd 29
@@ Expected result: The result should be null
@@ If the age of the password is above 29 days then Primus SCS791088 have to be
applied for APG40.
@@-------------------------------------------------------------------------@@ This is very important since if the USN are not working correctly the Replica
tion is not working correctly
@@ even if the replication status says that everything is working OK.
@GOTO AD_OK
@LABEL NO_USN
@COMMENT ROUTINE USN SKIPPED: ERROR
@LABEL AD_OK
@@-------------------------------------------------------------------------@@ Reason: Extended FRS and gp check (ref. EMIKSUO PA4)
"C:\WINNT\system32\gpupdate" /force
time /t
"C:\WINNT\system32\eventquery" /L application /V /FO list /R 1 /FI "Source eq Sc
eCli"
cd c:\winnt\sysvol\sysvol
dir
for /d %i in ("c:\winnt\sysvol\sysvol\*") do fsutil reparsepoint query "%i"
for /d %i in ("c:\winnt\sysvol\staging areas\*") do fsutil reparsepoint query "%
i"
dir "c:\winnt\sysvol\staging areas"
@LABEL NTFRS_check_for_files
dir \\{NODEA}\c$\winnt\sysvol\domain\scripts\testa.txt /b
@COPY {_line1}{isfilethere_testa}1 30
dir \\{NODEB}\c$\winnt\sysvol\domain\scripts\testb.txt /b
@COPY {_line1}{isfilethere_testb}1 30
@SET {testa_there} = 0
@IF {isfilethere_testa} = "testa.txt" THEN SET {testa_there} = 1
@IF {testa_there} = 1 THEN GOTO waitfor15sec_A
@SET {testb_there} = 0
@IF {isfilethere_testb} = "testb.txt" THEN SET {testb_there} = 1
@IF {testb_there} = 0 THEN GOTO NTFRS_check_continue
@T 15
del \\{NODEB}\c$\winnt\sysvol\domain\scripts\testb.txt
@GOTO NTFRS_check_continue
@LABEL waitfor15sec_A
@T 15
del \\{NODEA}\c$\winnt\sysvol\domain\scripts\testa.txt
@GOTO NTFRS_check_for_files
@LABEL NTFRS_check_continue
copy /Y nul \\{NODEA}\c$\winnt\sysvol\domain\scripts\testa.txt
copy /Y nul \\{NODEB}\c$\winnt\sysvol\domain\scripts\testb.txt
@T 15
dir \\{NODEA}\c$\winnt\sysvol\domain\scripts
dir \\{NODEB}\c$\winnt\sysvol\domain\scripts
del \\{NODEA}\c$\winnt\sysvol\domain\scripts\testa.txt
del \\{NODEB}\c$\winnt\sysvol\domain\scripts\testb.txt
@T 15
dir \\{NODEA}\c$\winnt\sysvol\domain\scripts
dir \\{NODEB}\c$\winnt\sysvol\domain\scripts
dir \\{NODEA}\c$\winnt\sysvol\domain\Policies
dir \\{NODEB}\c$\winnt\sysvol\domain\Policies
dir \\{NODEA}\c$\winnt\sysvol\domain\Policies\gpt.ini /s/b
dir \\{NODEB}\c$\winnt\sysvol\domain\Policies\gpt.ini /s/b
dir \\{NODEA}\c$\winnt\sysvol\domain\Policies\gptTmpl.inf /s/b
dir \\{NODEB}\c$\winnt\sysvol\domain\Policies\gptTmpl.inf /s/b
dsquery * -limit 0 | findstr -i "CN=Machine,CN={" | findstr -v "CN=Microsoft,"
dir C:\winnt\sysvol /s /b
"C:\Program files\GPMC\Scripts\ListAllGPOs.wsf" /v
cd /d c:\temp & dumplog -frs
type log.txt && del log.txt
net share
@T 1
ntfrsutl ds {NODEA}
@T 1
ntfrsutl ds {NODEB}
reg query "HKLM\System\CurrentControlSet\Services\Ntfrs\Parameters" /v "Ntfs Jou
rnal size in MB"
fsutil usn queryjournal C:
reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "WaitF
orNetwork"
@@ Expected result:
@@For further info to analyse the printouts, have a look at primus SCS622571 & S
CS570607
@@
@@ Alternative for oss.
@@dir "c:\winnt\sysvol\sysvol\*" | findstr JUNCTION
@@@SCAN {_line1} "JUNCTION" {pos}
@@@COMMENT {pos}
@@@SET {pos}={pos}+14
@@@COPY {_line1}{junc}{pos} 30
@@fsutil reparsepoint query c:\winnt\sysvol\sysvol\{junc}
@@dir "c:\winnt\sysvol\staging areas\*" | findstr JUNCTION
@@@SCAN {_line1} "JUNCTION" {pos}
@@@COMMENT {pos}
@@@SET {pos}={pos}+14
@@@COPY {_line1}{junc}{pos} 30
@@fsutil reparsepoint query "c:\winnt\sysvol\staging areas\{junc}"
@@
@@-------------------------------------------------------------------------@@ Reason: To check the group policy
@@
cd /d C:\TEMP && gpresult /z > C:\TEMP\gpresult.txt
type gpresult.txt && del C:\TEMP\gpresult.txt
@@
@@ Expected result:Legalnoticetext and legalnoticecaption policies should be unc
onfigured
@@-------------------------------------------------------------------------@@Print Automatic Defragmentation status by Diskeeper
"C:\Program Files\Diskeeper Corporation\Diskeeper\Diskeeper" /p /jt=z
@@-------------------------------------------------------------------------@LABEL END_AUDIT
@@Close the logfile
cd /d C:\
echo "End of AP Audit script rev R9A"
@@
@GETTIME {time_end} HHMM
@GETTIME {end_hh} HH
@GETTIME {end_mm} MM
@IF {start_hh}=00 THEN @SET {start_min} = {start_mm}
@IF {start_hh}<>00 THEN @SET {start_min} = {start_hh}*60
@IF {start_hh}<>00 THEN @SET {start_min}={start_min}+{start_mm}
@SET {start_min} = 1440-{start_min}
@IF {start_hh}>{end_hh} THEN @SET {start_min} = {start_min}
@SET {end_min}=0
@SET {end_min} = {end_hh}*60
@SET {end_min}={end_min}+{end_mm}
@IF {start_hh}<{end_hh} THEN @SET {end_min}={end_min}
@IF {end_hh}>{start_hh} THEN @SET {end_min}=1440-{end_min}
@IF {end_hh}={start_hh} THEN @SET {end_min}=1440-{end_min}
@IF {start_hh}>{end_hh} THEN @SET {totaltime}={start_min}+{end_min}
@IF {start_hh}={end_hh} THEN @SET {totaltime}={start_min}-{end_min}
@IF {start_hh}<{end_hh} THEN @SET {totaltime}={start_min}-{end_min}
@COMMENT Date: {date}
@COMMENT Started: {time}
@COMMENT Finished: {time_end}
@COMMENT Total execution time: {totaltime} minutes.
@@
@C
@EXIT
@@---------------Main Script AP_Audit_R9A.txt last line-------------------@@
@@Subroutines
@@
@@-----------------------------Subroutine SCB-RP Information -APG43--------@@LABEL SCB_Information
@@SET {loginsuccess} = 0
@@ONRECEIVE "Login incorrect" GOTO send_usrid
@@ONRECEIVE "login:" GOSUB send_pwd
@@ONRECEIVE "Password:" GOSUB send_cmd
@@
@@ Login Username for SCB-RP Slot
@@LABEL send_usrid
@@razor
@@PASTE {loginfo} {_lines}
@@COMPACT {loginfo}
@@SIZE {loginfo} {numlog}
@@SET {indexv} = 1
@@WHILE {indexv} < {numlog}
@@IF {loginfo[{indexv}]} MATCHES ".*not recognized.*" THEN GOTO SlotInfo_END
@@INC {indexv}
@@ENDWHILE
@@RETURN
@@
@@ Password
@@LABEL send_pwd
@@assar
@@RETURN
@@
@@ Checking the login success on SCB-RP Slot
@@LABEL send_cmd
@@PASTE {logdetail} {_lines}
@@COMPACT {logdetail}
@@SIZE {logdetail} {numlines}
@@SET {indexcount} = 1
@@WHILE {indexcount} < {numlines}
@@IF {logdetail[{indexcount}]} MATCHES ".*elcome to.*" THEN SET {loginsuccess} =
1
@@INC {indexcount}
@@ENDWHILE
@@IF {loginsuccess} <> 1 THEN GOTO SlotInfo_END
@@
@@ Command to check the link speed of eGEM
@@scbsw status
@@exit
@@LABEL SlotInfo_END
@@RETURN
@@
@@-----------------------------Subroutine HW_C2----------------------------@LABEL HW_C2
@COMMENT APG40_C2_HW
@@ Reason: To display the serial number and Manufacturing Date.
@@
fcc_getbib
@@
@@ Expected result: MADATE = 'date'
@@
SERIALNO = 'number'
@@
@@-------------------------------------------------------------------------@@ Reason: Check status of RAID Cluster Support.
@@
"C:\Program Files\Dptmgr\Raidutil" -K
@@
@@ Expected result: Cluster Support must be Enabled on both nodes and
@@
FW version FT06 or newer.
@@
@@ Address
Manufacturer/Model
FW Cluster Support
@@ --------------------------------------------------------------------@@ d0
DPT
PM3757U2
FT06 Enabled
@@
@@-------------------------------------------------------------------------@@ Reason: Check the RAID disk and firmware status.
@@
"C:\Program Files\Dptmgr\Raidutil" -L all
@@
@@ Expected result: On an active node all disks should be Optimal and
@@
FW version FT06 or newer. Ignore status 'Drive Failed'
@@
on RAID volumes on the passive node.
@@
@@-------------------------------------------------------------------------@@ Reason: Check setting of RAID remirroring speed.
@@
raidutil -r d0
@@
@@ Expected result:
@@ Address
Type
Rate
@@ --------------------------------------------------------------------------@@ d0b0t7d0 HBA
9.0s (fast)
@@ d0b0t1d0 RAID 1 (Mirrored)
9.0s (fast)
9.0s (fast)
9.0s (fast)
@@
@@ To correct a faulty setting:
@@ Command:
@@ raidutil -r fast d0
@@
@@--------------------------------------------------------------------------
@@ Reason: To view the raid controllers eventlog using the raidutil commands
@@
"C:\Program Files\Dptmgr\Raidutil" -e soft d0
"C:\Program Files\Dptmgr\Raidutil" -e recov d0
"C:\Program Files\Dptmgr\Raidutil" -e nonrecov d0
"C:\Program Files\Dptmgr\Raidutil" -e status d0
@@
@@-------------------------------------------------------------------------@@ Reason: To check Am-boards and their internal communication.
@@
To check the temperature on AM- and PSU-board.
@@
@IF {osver} = "NT4" THEN GOTO FCC_AM
fcc_amversion own
fcc_amversion other
@LABEL FCC_AM
@IF {cdt} = YES THEN return
cd /d "C:\Program Files\force\AM_Services\" && fcc_amtest own -f
del "C:\Program Files\force\AM_Services\AMProtocol.log"
cd /d "C:\Program Files\force\AM_Services\" && fcc_amtest other -f
cd /d C:\
@@
@@ Expected result: AM board typically 26.0 C must be below 50.
@@
PSU board typically 37.0 C must be below 58.
@@
AM board firmware version.
@@-------------------------------------------------------------------------@@
@@
cd /d "C:\Program files\force\tools"
FrChangeDisk /?
cd /d C:\
@@
@@Expected Result:
@@FrChageDisk Version: 1.1
@@
@@
@@Reason:To check if autoadmin logon is enabled
@@
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v AutoAd
minLogon
@@
@@Expected Result:
@@HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
@@
AutoAdminLogon
REG_SZ
0
@@
@@------------------------------------------------------------------------@@Reason:To check the contents of the V:\APZ\DATA\BOOT Folder
@@
@@
cfeted -v cur
@@
@@Expected Result:
@@ Directory of V:\APZ\data\boot
@@
@@18/06/2011 15:21
<DIR>
.
@@18/06/2011 15:21
<DIR>
..
@@08/03/2011 16:39
<DIR>
APZ_VM
@@07/03/2011 16:28
<DIR>
cpa
@@07/03/2011 16:28
<DIR>
cpb
@@18/06/2011 15:21
<DIR>
fw
@@08/03/2011 16:41
<DIR>
image
@@18/06/2011 15:21
<DIR>
temp
@@
0 File(s)
0 bytes
@@
8 Dir(s) 7.966.674.944 bytes free
@@
@@
@@---------------------------------------------------------------------------@@Reason:To check the WSRM service
@@
wsrmls
@@
@@Expected Result:
@@
@@WSRM POLICIES
@@POLICY NAME
STATE
@@-------------------@@MCS_Rap
Not Active
@@AES_Rap
Active
@@FMS_Rap
Not Active
@@WSRMDefault
Not Active
@@
@@
@@---------------------------------------------------------------------------@@
@RETURN
@@
@@-----------------------------Subroutine HW_C4----------------------------@LABEL HW_C4
@COMMENT APG40_C4_HW
@@ Reason: To display the serial number and Manufacturing Date.
@@
fcc_getbib
@@
@@ Expected result: MADATE = 'date'
@@
SERIALNO = 'number'
@@
@@-------------------------------------------------------------------------@@ Reason: To show (APG40/C4)
@@
physical SCSI Disks Information
@@
Logical Drives configuration
@@
MegaRAID Configuration
@@
@@Gathering RAID information via SCSIDISK tool:
@@Physical SCSI disk info:
"C:\Program Files\Force\Raid\ScsiDisk" /DI
@@Logical drive configuration:
"C:\Program Files\Force\Raid\ScsiDisk" /LD
@@Dump Debug Data of MegaRC controller (only available before a reboot):
"C:\Program Files\Force\Raid\ScsiDisk" /DD
@@Channel Swap Setting:
"C:\Program Files\Force\Raid\ScsiDisk" /CS
@@Gathering RAID information via MEGARC:
@@Adapter and Logical drive info:
"C:\Program Files\Force\Raid\megarc" -ctlrInfo -a0
@@logical drives info
"C:\Program Files\Force\Raid\megarc" -ldInfo -a0 -Lall
@@Configuration info:
"C:\Program Files\Force\Raid\megarc" -dispCfg -a0
@@Physical drive info:
"C:\Program Files\Force\Raid\megarc" -logPhysInfo -a0
@@Adapter,Channel,Target ID information
"C:\Program Files\Force\Raid\megarc" -phys -chAll -idAll -a0
@@Adapter,Firmware Type,Card Type Info:
"C:\Program Files\Force\Raid\megarc" -AllAdpInfo
@@BIOS Setting Info:
"C:\Program Files\Force\Raid\megarc" -ShowBios -a0
@@NVRAM Log:
"C:\Program Files\Force\Raid\megarc" -getNVRAMLog -a0
@@Extended Sense Log:
"C:\Program Files\Force\Raid\megarc" -ViewExtSenseData -chAll -idAll -a0
@@Error Information:
"C:\Program Files\Force\Raid\megarc" -pdFailInfo -chAll -idAll -a0
@@Gamevlog:
type c:\winnt\system32\gamserv\gamevlog.log
@@
@@ Expected result: MegaRAID Configuration
@@
@@-------------------------------------------------------------------------@@ Reason: To check Am-boards and their internal communication.
@@
To check the temperature on AM- and PSU-board.
@@
fcc_amversion own
fcc_amversion other
cd /d "C:\Program Files\force\AM_Services\" && fcc_amtest own -f
cd /d "C:\Program Files\force\AM_Services\" && fcc_amtest other -f
cd /d C:\
@@
@@ Expected result: AM board typically 26.0 C must be below 50.
@@
PSU board typically 37.0 C must be below 58.
@@
AM board firmware version.
@@-------------------------------------------------------------------------@@
@@
cd /d "C:\Program files\force\tools"
FrChangeDisk /?
cd /d C:\
@@
@@Expected Result:
@@FrChageDisk Version: 1.1
@@
@@
@@Reason:To check if autoadmin logon is enabled
@@
minLogon
@@
@@Expected Result:
@@
AutoAdminLogon
REG_SZ
0
@@
@@-------------------------------------------------------------------------@@Reason:To check the contents of the V:\APZ\DATA\BOOT Folder
@@
@@
cfeted -v cur
@@
@@Expected Result:
@@ Directory of V:\APZ\data\boot
@@
@@18/06/2011 15:21
<DIR>
.
@@18/06/2011 15:21
<DIR>
..
@@08/03/2011 16:39
<DIR>
APZ_VM
@@07/03/2011 16:28
<DIR>
cpa
@@07/03/2011 16:28
<DIR>
cpb
@@18/06/2011 15:21
<DIR>
fw
@@08/03/2011 16:41
<DIR>
image
@@18/06/2011 15:21
<DIR>
temp
@@
0 File(s)
0 bytes
@@
8 Dir(s) 7.966.674.944 bytes free
@@
@@
@@
@@---------------------------------------------------------------------------@@Reason:To check the WSRM service
@@
wsrmls
@@
@@Expected Result:
@@
@@WSRM POLICIES
@@POLICY NAME
STATE
@@-------------------@@MCS_Rap
Not Active
@@AES_Rap
Active
@@FMS_Rap
Not Active
@@WSRMDefault
Not Active
@@
@@
@@---------------------------------------------------------------------------@RETURN
@@
@@
@@---------------------------Subroutine APG43_EVO---------------------------@LABEL APG43_EVO
@@--------------------------------------------------------------------------@@ Reason: To show EVO node info
@COMMENT APG43_EVO
hwiprint
hwmxls
upgpkg -i
timerefls
timerefscxconf -l
xcountls
@RETURN
@@
@@---------------------------Subroutine APG43_HW---------------------------@LABEL APG43_HW
@@--------------------------------------------------------------------------
@@ Reason: To show APG43 hw info

@COMMENT APG43_HW
hwmls
hwmls -l
hwcls
hwcls -x long
WMIC Csproduct List Brief
@@
@@--------------------------------------------------------------------------@@ Reason : To find the DVD model
@@
@@
wmic cdrom get deviceid
@@
@@Expected Result:Prints the DVD model and the FW ver
@@
@@
@@---------------------------------------------------------------------------vxassist version
vxdg list
vxdisk list
vxdisk diskinfo Harddisk0
@@
vxvol volinfo E:
vxvol volinfo C:
vxvol volinfo D:
vxvol volinfo F:
@IF {nodestate} <> "active" THEN GOTO 43_PASSIVE_4
vxvol volinfo I:
vxvol volinfo K:
vxdg -gdatadisk dginfo
cd /d "C:\Program Files\AP\APOS\clone"
dskcache PhysicalDrive1
dskcache PhysicalDrive2
cd /d c:\temp
ssuls -l
@LABEL 43_PASSIVE_4
echo Y | apdiskdiag -v
@@ Expected result:
@@-------------------------------------------------------------------------@@ Reason: To check which hot fixes and security patches are installed.
@@
reg query "HKLM\SOFTWARE\Ericsson\Adjunct Processor\APOS\CXC1371176" /v PATCHES
/se :
reg query "HKLM\SOFTWARE\Ericsson\Adjunct Processor\APOS\CXC1371177" /v PATCHES
/se :
@@ Expected result KB list
@@-------------------------------------------------------------------------@@ Reason: To check tftp configuration
@@
reg query "HKLM\SOFTWARE\WinAgents\TFTPService"
@@ Expected result:
@@HKEY_LOCAL_MACHINE\SOFTWARE\WinAgents\TFTPService
@@
DefaultRights
REG_SZ
RW
@@
HostList
REG_SZ
@@
LogDirectory
REG_SZ
C:\Program Files\WinAgents\TFTP Service\LogFiles
@@
TFTPRoot
REG_SZ
K:\APZ\data\BOOT
@@
AllowOverWrite
REG_DWORD
0x1
@@
TFTPRetr
REG_DWORD
0xa
@@
TFTPTimeout
REG_DWORD
0xa
@@
FWEnabled
REG_DWORD
0x0
@@
FWMaxPort
REG_DWORD
0xffff
@@
FWMinPort
REG_DWORD
0x401
@@
LogLevel
REG_DWORD
0x6
@@
WriteLog
REG_DWORD
0x1
@@
HighPriority
REG_DWORD
0x1
@@
LogFileCount
REG_DWORD
0x1
@@
TFTPPort
REG_DWORD
0x45
@@
OpBlocksize
REG_DWORD
0x1
@@
OpTSize
REG_DWORD
0x1
@@
OpTimeout
REG_DWORD
0x1
@@
LocalTime
REG_DWORD
0x0
@@
@@-------------------------------------------------------------------------@@ Reason: Internal, to detect if APG43 for blade cluster
reg query "HKLM\SOFTWARE\Ericsson\Adjunct Processor\ACS\CS"
@@COPY {_line1}{bc}1 5
@@IF {bc}="" THEN SET {bc}="YES"
@@
@@-------------------------------------------------------------------------@@Reason:To check if autoadmin logon is enabled
@@
minLogon
@@
@@Expected Result:
@@
AutoAdminLogon
REG_SZ
0
@@
@@-------------------------------------------------------------------------@RETURN
@@
@@
@@---------------------------Subroutine APG40_ACL--------------------------@LABEL APG40_ACL
@COMMENT APG40_ACL
@@-------------------------------------------------------------------------@@ Reason: To check that the acl:s are set correct.
@@
@@These ACL's are according to the "standard baseline"
cd /d C:\
@@ Print all acl's on all "system" disks
cacls C:\
cacls D:\
cacls E:\
cacls F:\
cacls C:\winnt /C
cacls C:\winnt\*.dll /C
cacls C:\winnt\*.exe /C
cacls C:\winnt\*.sys /C
cacls C:\winnt\system32
cacls C:\winnt\system32\*.dll /C
cacls C:\winnt\system32\*.exe /C
cacls C:\winnt\system32\*.sys /C
cacls "C:\Program Files\AP"
cacls "C:\Program Files\AP\*" /C /T

cacls C:\acs
cacls C:\acs\*.* /C /T
cacls C:\inetsrv\ftproot /C /T
cacls C:\tftpboot
cacls C:\tftpboot\* /C /T
cacls C:\temp
cacls F:\
cacls F:\acs
cacls F:\ACS\data
cacls F:\ACS\logs
cacls F:\acs\data\emf
@COMMENT END_OF_DATA_DISKS
@@
@@ Expected result: No deviation from reference system. In case deviations
@@
are found, use APAclSet to correct the problem.
@@
@@
Note: The functionality to create and restore an ACL
@@
definition file was released in CNI
@@
109 22-APZ21220/5-1224.
@@
Reference ACL files are delivered from
@@
CM130/CM220/CM4220/CM311
@@
@@
@@ To find the ACL baseline reference for your system, search in Prim/GASK for t
he 1095
@@ for the reference package for your AP GAS e.g.
@@ "REFERENCE PACKAGE FOR GAS 3.0 AP1/40 - AC-M4225 LZY 216 1180/3" has a 1095-L
ZY 216 1180/3.
@@ In the 1095 the ACL baseline reference is called "ACL reference".
@@ If there is more than 1 ACL reference document the superseded documents will
have a
@@ "No or ceased relationship" which is indicated by a slash ( / ) in the "PRA" co
lumn.
@@ The valid document will have a revision in this PRA column e.g. "A".
@@ 1095 documents are easily browsed in GASK2WEB
@@ http://gask.ericsson.se/gask2web/1095/index.html
@@ A link to a document in GASK can be used e.g. by using the
@@ GASK2Web Document Browser http://gask.ericsson.se/gask2web/index.html
@@ e.g. ACL baseline reference document 225/1551-LZY 216 1180/3 Uen Rev A is
@@ http://gask2web.ericsson.se/pub/get?DocNo=225/1551-LZY2161180/3&lang=EN&rev=A
@@
@@ Full description also available at:
@@ http://apzsupp.rnd.as.sw.ericsson.se/axe/ap/APG40_Audit_Script_work_files/How
to_find_ACL-baseline-ref.doc
@@
@@
@@-------------------------------------------------------------------------@@ Reason: To check all acl:s for three dir levels on all data disks.
@@
@@
@@ I:\ J:\ K:\ L:\ M:\ R:\ S:\ V:\ G:\ Q:\ Y:\
@IF {osver}="NT4" THEN GOTO J_Cacls
cacls I:\
@GOTO J_Cacls_End
@LABEL J_Cacls
cacls J:\
@LABEL J_Cacls_End
cacls K:\
cacls L:\
cacls M:\
cacls R:\
cacls S:\
cacls V:\
cacls G:\
cacls Q:\
cacls Y:\
@COMMENT A_U_D_I_T
@@
@IF {osver} = "NT4" THEN GOTO J_Drive
@@
@@ I
cacls I:\
cacls I:\*
cacls I:\MSCS\*
@GOTO J_Drive_End
@LABEL J_Drive
@@ J
cacls J:\
cacls J:\*
cacls J:\MSCS\*
@LABEL J_Drive_End
@@ L
cacls L:\
cacls L:\*
cacls L:\CPS\*
cacls L:\CPS\Data\*
cacls L:\FMS\*
cacls L:\FMS\Data\*
@@ M
cacls M:\
cacls M:\*
cacls M:\MCS\*
cacls M:\MCS\Data\*
cacls M:\Images\*
@@ R
cacls R:\
cacls R:\*
cacls R:\STS\*
cacls R:\STS\Data\*
cacls R:\STS\Logs\*
@@ S
cacls S:\
cacls S:\*
cacls S:\STS\*
cacls S:\STS\Data\*
@@ V
cacls V:\
cacls V:\*
cacls V:\APZ\*
cacls V:\APZ\Data\*
@@ G
cacls G:\
cacls G:\*
cacls G:\Ftpvol\*
@@ Q
cacls Q:\
cacls Q:\*
cacls Q:\ACS\*
cacls Q:\ACS\Data\*
@@ Y
cacls Y:\
cacls Y:\*
cacls Y:\ACS\*
cacls Y:\ACS\Data\*
@@ K
cacls K:\
cacls K:\*
cacls K:\ACS\*
cacls K:\AES\*
cacls K:\FMS\*
@IF {osver} <> "NT4" THEN GOTO K_Drive_End
cacls K:\IMAGES\*
@LABEL K_Drive_End
cacls K:\MCS
cacls K:\OCS
cacls K:\SGS
@@Only valid for APZ 11.1
@@ X
cacls X:\
cacls X:\*
cacls X:\MessageStore\*
cacls X:\MessageStore\ACA\*
@@
@@ Expected result:
ACL's for "root" on all drives
@@
Everyone:(OI)(CI)R
@@
@@
@@
@@
General example:
@@
ACL's on L:\ directories
@@
@@
AP61DOM\FMSADMG:(OI)(CI)F (user "FMSADMG" varies accordi
ng to subsys)
@@
AP61DOM\FMSUSRG:(OI)(CI)R (user "FMSUSRG" varies accordi
ng to subsys)
@@
@@
Exception for G:\ftpvol
@@
G:\ftpvol AP150DOM\FMSUSRG:(OI)(CI)R
@@
AP150DOM\FMSADMG:(OI)(CI)F
@@
@@
AP150DOM\ACSUSRG:(OI)(CI)R
@@
AP150DOM\ACSADMG:(OI)(CI)F
@@
@LABEL NO_PASSIVE_6
@@-------------------------------------------------------------------------@@ Reason: Not part of the "standard baseline".
@@
cacls C:\*.* /c
cacls "C:\inetsrv\*.*" /c
@IF {osver} <> "NT4" THEN GOTO M_Drive_Cacls
cacls K:\Images\* /T
cacls J:\* /C /T
@GOTO NO_PASSIVE_7
@LABEL M_Drive_Cacls
cacls M:\Images\* /T
cacls I:\* /C /T
@@
@@ Expected result: ACL

@@
@LABEL NO_PASSIVE_7
@@-------------------------------------------------------------------------@@ Reason: To check permissions on E: partition (TR HG70665)
@@
cacls E:\
cacls E:\* /C
@@
@@ Expected result: ACL's according to examples.
@@
@@ Example NT4:
@@ C:\>cacls E:
@@ E:\ Everyone:(OI)(CI)R
@@
@@
@@
@@
@@ C:\>cacls E:\* /C
@@ E:\BOOT.INI NT AUTHORITY\SYSTEM:F
@@
@@
@@ E:\ntdetect.com NT AUTHORITY\SYSTEM:F
@@
@@
@@ E:\ntldr NT AUTHORITY\SYSTEM:F
@@
@@
@@ E:\RECYCLER Everyone:R
@@
Everyone:(OI)(CI)(IO)R
@@
NT AUTHORITY\SYSTEM:F
@@
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)F
@@
BUILTIN\Administrators:F
@@
BUILTIN\Administrators:(OI)(CI)(IO)F
@@
@@ Example Windows 2003 Server:
@@ c:\winnt\profiles\Administrator>cacls E:
@@ E:\ BUILTIN\Administrators:(OI)(CI)F
@@
@@
Everyone:(OI)(CI)R
@@
@@
@@ c:\winnt\profiles\Administrator>cacls E:\* /C
@@ E:\BOOT.BAK BUILTIN\Administrators:F
@@
@@
@@
BUILTIN\Users:R
@@
@@ E:\boot.ini BUILTIN\Server Operators:C
@@
@@
@@
@@ E:\cmdcons BUILTIN\Administrators:(OI)(CI)F
@@
@@
@@
CREATOR OWNER:(OI)(CI)(IO)F
@@
BUILTIN\Users:(OI)(CI)R
@@
BUILTIN\Users:(CI)(special access:)
@@
@@
FILE_APPEND_DATA
@@
@@
@@
@@
FILE_WRITE_DATA
@@
@@
@@ E:\cmldr BUILTIN\Administrators:F
@@
@@
@@
BUILTIN\Users:R
@@
@@ E:\NTDETECT.COM BUILTIN\Server Operators:C
@@
@@
@@
@@ E:\ntldr BUILTIN\Server Operators:C
@@
@@
@@
@@ E:\RECYCLER BUILTIN\Administrators:(OI)(CI)F
@@
@@
@@
@@
@@
@@
@@
FILE_APPEND_DATA
@@
@@
@@
@@
FILE_WRITE_DATA
@@
@@
@@ E:\System Volume Information NT AUTHORITY\SYSTEM:(OI)(CI)F
@@
@@-------------------------------------------------------------------------@@ Reason: To check that no occurrences of <Account Domain not found> exist.
@@ OSU: extremely important on Q and Y partition.
@@
@COMMENT SYSTEM DISKS
cacls C:\* /T /C > c:\temp\acllist_c.txt 2<&1
type C:\temp\acllist_c.txt|find "Account Domain not found"
del c:\temp\acllist_c.txt
cacls E:\* /T /C > c:\temp\acllist_e.txt 2<&1
type C:\temp\acllist_e.txt|find "Account Domain not found"
del c:\temp\acllist_e.txt
cacls F:\* /T /C > c:\temp\acllist_f.txt 2<&1
type C:\temp\acllist_f.txt|find "Account Domain not found"
del C:\temp\acllist_f.txt
@IF {nodestate} <> "active" THEN GOTO NO_ACTIVE_1
@COMMENT DATA DISKS
cacls G:\* /T /C > c:\temp\acllist_g.txt 2<&1
type C:\temp\acllist_g.txt|find "Account Domain not found"
del c:\temp\acllist_g.txt
cacls I:\* /T /C > c:\temp\acllist_i.txt 2<&1
type C:\temp\acllist_i.txt|find "Account Domain not found"
del c:\temp\acllist_i.txt
cacls J:\* /T /C > c:\temp\acllist_j.txt 2<&1
type C:\temp\acllist_j.txt|find "Account Domain not found"
del c:\temp\acllist_j.txt
cacls K:\* /T /C > c:\temp\acllist_k.txt 2<&1

type C:\temp\acllist_k.txt|find "Account Domain not found"
del c:\temp\acllist_k.txt
cacls L:\* /T /C > c:\temp\acllist_l.txt 2<&1
type C:\temp\acllist_l.txt|find "Account Domain not found"
del c:\temp\acllist_l.txt
cacls M:\* /T /C > c:\temp\acllist_m.txt 2<&1
type C:\temp\acllist_m.txt|find "Account Domain not found"
del c:\temp\acllist_m.txt
cacls Q:\* /T /C > c:\temp\acllist_q.txt 2<&1
type C:\temp\acllist_q.txt|find "Account Domain not found"
del c:\temp\acllist_q.txt
cacls R:\* /T /C > c:\temp\acllist_r.txt 2<&1
type C:\temp\acllist_r.txt|find "Account Domain not found"
del c:\temp\acllist_r.txt
cacls S:\* /T /C > c:\temp\acllist_s.txt 2<&1
type C:\temp\acllist_s.txt|find "Account Domain not found"
del c:\temp\acllist_s.txt
cacls V:\* /T /C > c:\temp\acllist_v.txt 2<&1
type C:\temp\acllist_v.txt|find "Account Domain not found"
del c:\temp\acllist_v.txt
cacls Y:\* /T /C > c:\temp\acllist_y.txt 2<&1
type C:\temp\acllist_y.txt|find "Account Domain not found"
del C:\temp\acllist_y.txt
@@
@@ Expected result: No Account Domain not found found.
@@
@LABEL NO_ACTIVE_1
@@-------------------------------------------------------------------------@RETURN
@@
@@
@@
@@---------------------------Subroutine APG43_ACL--------------------------@LABEL APG43_ACL
@COMMENT APG43_ACL
@@-------------------------------------------------------------------------@@ Reason: To check that the acl:s are set correct.
@@
@@These ACL's are according to the "standard baseline"
cd /d C:\
@@ Print all acl's on all "system" disks
cacls C:\
cacls D:\
cacls E:\
cacls F:\
cacls C:\winnt /C
cls C:\winnt\*.dll /C
cacls C:\winnt\*.exe /C
cacls C:\winnt\*.sys /C
cacls C:\winnt\system32
cacls C:\winnt\system32\*.dll /C
cacls C:\winnt\system32\*.exe /C
cacls C:\winnt\system32\*.sys /C
cacls "C:\Program Files\AP"
cacls "C:\Program Files\AP\*" /C /T
cacls "C:\program files\ap\xmlfile"
cacls "C:\program files\appext"
cacls "C:\program files\appext\*" /C /T
cacls C:\acs
cacls C:\acs\*.* /C /T
cacls C:\inetsrv\ftproot /C /T
cacls C:\tftpboot
cacls C:\tftpboot\* /C /T
cacls C:\temp
cacls F:\
cacls F:\acs
cacls F:\ACS\data
cacls F:\ACS\logs
cacls F:\acs\data\emf
@COMMENT END_OF_DATA_DISKS
@@
@@ Expected result: No deviation from reference system. In case deviations
@@
are found, use APAclSet to correct the problem.
@@
@@
Note: The functionality to create and restore an ACL
@@
definition file was released in CNI
@@
109 22-APZ21220/5-1224.
@@
Reference ACL files are delivered from
@@
CM130/CM220/CM4220/CM311
@@
@@
@@ To find the ACL baseline reference for your system, search in Prim/GASK for t
he 1095
@@ for the reference package for your AP GAS e.g.
@@ "REFERENCE PACKAGE FOR GAS 3.0 AP1/40 - AC-M4225 LZY 216 1180/3" has a 1095-L
ZY 216 1180/3.
@@ In the 1095 the ACL baseline reference is called "ACL reference".
@@ If there is more than 1 ACL reference document the superseded documents will
have a
@@ "No or ceased relationship" which is indicated by a slash ( / ) in the "PRA" co
lumn.
@@ The valid document will have a revision in this PRA column e.g. "A".
@@ 1095 documents are easily browsed in GASK2WEB
@@ http://gask.ericsson.se/gask2web/1095/index.html
@@ A link to a document in GASK can be used e.g. by using the
@@ GASK2Web Document Browser http://gask.ericsson.se/gask2web/index.html
@@ e.g. ACL baseline reference document 225/1551-LZY 216 1180/3 Uen Rev A is
@@ http://gask2web.ericsson.se/pub/get?DocNo=225/1551-LZY2161180/3&lang=EN&rev=A
@@
@@ Full description also available at:
@@ http://apzsupp.rnd.as.sw.ericsson.se/axe/ap/APG40_Audit_Script_work_files/How
to_find_ACL-baseline-ref.doc
@@
@@
@@-------------------------------------------------------------------------@@ Reason: To check all acl:s for three dir levels on all data disks.
@@
@@
@@ I:\ K:\
cacls I:\
cacls K:\
@@
@COMMENT A_L_A_N
@@ I
cacls I:\
cacls I:\*
cacls I:\MSCS\
cacls I:\Diskeeper\*
@@ K
cacls K:\
cacls K:\*
cacls K:\ACS\*
cacls K:\AES\*
cacls K:\APZ\*
cacls K:\CPS\*
cacls K:\CQS\*
cacls K:\Diskeeper\*
cacls K:\FMS\*
cacls K:\ftpvol\*
cacls K:\Images\*
cacls K:\MCS\*
cacls K:\OCS\*
cacls K:\SGS\*
cacls K:\STS\*
@@
@@
@@ Expected result:
ACL's for "root" on all drives
@@
Everyone:(OI)(CI)R
@@
@@
@@
@@
General example:
@@
ACL's on L:\ directories
@@
@@
AP61DOM\FMSADMG:(OI)(CI)F (user "FMSADMG" varies accordi
ng to subsys)
@@
AP61DOM\FMSUSRG:(OI)(CI)R (user "FMSUSRG" varies accordi
ng to subsys)
@@
@@
Exception for G:\ftpvol
@@
G:\ftpvol AP150DOM\FMSUSRG:(OI)(CI)R
@@
AP150DOM\FMSADMG:(OI)(CI)F
@@
@@
AP150DOM\ACSUSRG:(OI)(CI)R
@@
AP150DOM\ACSADMG:(OI)(CI)F
@@
@LABEL 43_PASSIVE_1
@@-------------------------------------------------------------------------@@ Reason: Not part of the "standard baseline".
@@
cacls C:\*.* /c
cacls "C:\inetsrv\*.*" /c
cacls K:\Images\* /T
cacls I:\* /C /T
@@
@@
@@ Expected result: ACL
@@
@LABEL 43_PASSIVE_2
@@-------------------------------------------------------------------------@@ Reason: To check permissions on E: partition (TR HG70665)
@@
cacls E:\
cacls E:\* /C
@@
@@ Expected result: ACL's according to examples.
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
@@
Example Windows 2003 Server:

c:\winnt\profiles\Administrator>cacls E:
E:\ BUILTIN\Administrators:(OI)(CI)F
Everyone:(OI)(CI)R
c:\winnt\profiles\Administrator>cacls E:\* /C
E:\BOOT.BAK BUILTIN\Administrators:F
BUILTIN\Users:R
E:\boot.ini BUILTIN\Server Operators:C
E:\cmdcons BUILTIN\Administrators:(OI)(CI)F
FILE_APPEND_DATA
FILE_WRITE_DATA
E:\cmldr BUILTIN\Administrators:F
BUILTIN\Users:R
E:\NTDETECT.COM BUILTIN\Server Operators:C
E:\ntldr BUILTIN\Server Operators:C
E:\RECYCLER BUILTIN\Administrators:(OI)(CI)F
FILE_APPEND_DATA
FILE_WRITE_DATA
E:\System Volume Information NT AUTHORITY\SYSTEM:(OI)(CI)F
@@
@@-------------------------------------------------------------------------@@ Reason: To check that no occurrences of <Account Domain not found> exist.
@@ OSU: extremely important on Q and Y partition.
@@
@COMMENT SYSTEM DISKS
cacls C:\* /T /C > c:\temp\acllist_c.txt 2<&1
type C:\temp\acllist_c.txt|find "Account Domain not found"
del c:\temp\acllist_c.txt
cacls E:\* /T /C > c:\temp\acllist_e.txt 2<&1
type C:\temp\acllist_e.txt|find "Account Domain not found"
del c:\temp\acllist_e.txt
cacls F:\* /T /C > c:\temp\acllist_f.txt 2<&1
type C:\temp\acllist_f.txt|find "Account Domain not found"
del C:\temp\acllist_f.txt
@COMMENT DATA DISKS
cacls I:\* /T /C > c:\temp\acllist_i.txt 2<&1
type C:\temp\acllist_i.txt|find "Account Domain not found"
del c:\temp\acllist_i.txt
cacls K:\* /T /C > c:\temp\acllist_k.txt 2<&1
type C:\temp\acllist_k.txt|find "Account Domain not found"
del c:\temp\acllist_k.txt
@@
@@ Expected result: No Account Domain not found found.
@@
@LABEL 43_PASSIVE_3
@@-------------------------------------------------------------------------@RETURN
@@-------------------------Subroutine BC_HW-----------------------@LABEL BC_HW
@COMMENT BC_HW
@@
cpgls
apzvlanls
nels
@PASTE {DCP0} {_lines}
@COMPACT {DCP0}
@SIZE {DCP0} {numtype}
@SET {indextype} = 1
@WHILE {indextype} < {numtype}
@BEFORE {DCP0} {DCP0[{indextype}]} ":"
@IF {DCP0} MATCHES ".*Number of Dual-Sided CPs.*" THEN @AFTER {DCP1} {DCP0[{inde
xtype}]} ":"
@IF {DCP0} MATCHES ".*Number of Single-Sided CPs.*" THEN @AFTER {SCP1} {DCP0[{in
dextype}]} ":"
@INC {indextype}
@ENDWHILE
@COMMENT Dual CPs: {DCP1}
@COMMENT Single CPs: {SCP1}
@SET {CP_Count} = {DCP1} + {SCP1}
@COMMENT Total CP_Count {CP_Count}
cpls -l
@PASTE {CPNAMES} {_lines}
@SIZE {CPNAMES} {numCPs}
@@
@IF {nodestate} <> "active" THEN GOTO BC_PASSIVE_1
cpdtest -c
cpdtest -p
cpdlist -s
ssuls -l
capls
@SET {indexCP} = 5
@WHILE {indexCP} < {numCPs}
@ITEM {GET_CPNAME} {CPNAMES[{indexCP}]} " " 1
@IF {GET_CPNAME} MATCHES "BC.*" THEN GOTO L1
@IF {GET_CPNAME} MATCHES "CP.*" THEN GOTO L1
@GOTO L2
@LABEL L1
@ITEM {GET_CPNAME} {CPNAMES[{indexCP}]} " " 1
@TRIM {GET_CPNAME}
@COMMENT GET_CPNAME {GET_CPNAME}
cpfdf -cp {GET_CPNAME}
cpfls -cp {GET_CPNAME} -l
cpdtest -s -cp {GET_CPNAME}
cpfls -cp {GET_CPNAME}| FindStr /R "RELFSW[0-9]"
cpfls -cp {GET_CPNAME} -ls RELFSW0
cpfls -cp {GET_CPNAME} -ls RELCMDHDF
bupls -cp {GET_CPNAME}
bupidls -cp {GET_CPNAME}
@COMMENT END OF CP : {GET_CPNAME}
@LABEL L2
@INC {indexCP}
@ENDWHILE
afpls -l
cdhdsls -l
cdhls -l
dbols -l
dir /s K:\MCS\logs\
type K:\MCS\logs\trace.log
@@
@LABEL BC_PASSIVE_1
@RETURN
@@-------------------File AP_Audit_R9A.txt last line-----------------------

AP Audit R9a

Enviado por

Dados do documento

Título original

Direitos autorais

Formatos disponíveis

Compartilhar este documento

Compartilhar ou incorporar documento

Opções de compartilhamento

Você considera este documento útil?

Este conteúdo é inapropriado?

Direitos autorais:

Formatos disponíveis

AP Audit R9a

Enviado por

Direitos autorais:

Formatos disponíveis

@@__________________________________________________________________________

OSU: Check input language setting (TR HH28381).

cd /d C:\temp && regedit /e iever.log "HKEY_LOCAL_MACHINE\Software\Microsoft\Int

tes for Build 10.

@@ Reason: Display environment variables, verify the path settings.

@@ Reason : To check the AP node number

@SET {pos} = {pos}-5

fc c:\tftpboot\boot.ipn0 c:\"Program Files"\AP\OCS\conf\boot.ipnX.cp_loading

@@ Reason: To check that no buffer congestions are present.

@@-------------------------------------------------------------------------@@ Reason: Check that the IIS Meta database is consistent.

@SET {attflag}= "/S"

@@ Bytes per cluster: 512

@@-------------------------------------------------------------------------@@ Reason: Check automatically started applications.

Host Name . . . . . . . . . : ap150a.uab.ericsson.se

Description . . . . . . . . : Intel(R) PRO Adapter

Description . . . . . . . . : Intel(R) PRO Adapter

Description . . . . . . . . : Intel(R) PRO Adapter

. . . : Intel(R) PRO Adapter

. . . : Intel D101ER-based Integrated Fast Ethe

type C:\temp\dupl.txt | findstr /I "SpeedDuplex" | findstr /V PROSetNdi && del C

@@ Expected result: The versions should be up-to-date.

@@ Connecting to \\WELOVEAPG40A ...

@SIZE {clusterRes} {numRes}

@IF {length4} = 0 THEN GOTO NO_RESP3

swrprint RDTBIN | find /I "RDTBIN"

@@ Reason: IO DEVICE DATA LISTING.

@IF {apzver} > "33" THEN GOTO _BUPLS

dhcpcmd.exe 127.0.0.1 checkdb 192.168.170.0

netsh ipsec dynamic show config

@@ Dhcp Server 192.168.202.2 Scope 192.168.169.0 set reservedoptionvalue 192.168

@@ Dhcp Server 192.168.202.2 Scope 192.168.170.0 set optionvalue 66 STRING "192.

@@-------------------------------------------------------------------------@@ Reason: Operating system configuration information report.

@IF {OU} = 0 THEN GOTO NO_USN

@@ Reason: To show APG43 hw info

cacls "C:\Program Files\AP\*" /C /T

@@ Expected result: ACL

cacls K:\* /T /C > c:\temp\acllist_k.txt 2<&1

Example Windows 2003 Server:

Você também pode gostar