IMPORTANT: This site is planned to be decommissioned in 2026. Visit the Tanium Resource Center for all Tanium release notes, user guides, and support information. To view release notes in the Resource Center, see Tanium Release Notes.
IMPORTANT: If you are using semi-annual releases for on premises, see the Release notes for 2024H1 semiannual release, Release notes for 2024H2 semiannual release, or Release notes for 2025H1 semiannual release on the Tanium Resource Center.
Effective October 15, 2024: On prem release notes on the Tanium Knowledge Base are frozen. For release notes related to 7.4 or 7.5 Server and Solutions, see the Monthly updates for Tanium Version 7.4 and 7.5 Server and Solutions on the Tanium Resource Center.

ADQuery 1.0.0.0022

From Tanium Knowledge Base
Jump to navigation Jump to search


Introduction: ADQuery

Download Location

This content is available at: https://content.tanium.com/files/published/ADQuery/2016-08-01_08-44-13_1.0.0.0022-g8833e7f/ADQuery.xml

Usage

Questions

Has Stale AD Admin Accounts

Get Target from all machines with Has Stale AD Admin Accounts[4] containing "true"
Packages:

Has Stale AD Computer Attributes

Get Target from all machines with Has Stale AD Attributes[4] containing "true"

Packages

Get AD Computer Attributes

This package contains 1 files and 0 sensors.

Additional Properties:

  • Command Line: cmd /c cscript //T:60 get_ad_comp_attr.vbs
  • Command Line Timeout: 60

Files:

  • get_ad_comp_attr.vbs

Get AD Local Administrators

This package contains 1 files and 0 sensors.

Additional Properties:

  • Command Line: cmd /c cscript //T:60 GenerateAdminList.vbs
  • Command Line Timeout: 60

Files:

  • GenerateAdminList.vbs

Sensors

AD Local Administrators

Retrieves Active Directory computer attributes from the Tools\AdQuery\adminUsers.dat file.

Parameters

Name Description Type Possible / Default Values
type Admin Type Selection

Domain
Local
All

Has Stale AD Admin Accounts

Returns True or False based on user provided number of hours the Tools\AdQuery\adminUsers.dat file should be considered stale. Compares the current time against the time the dat file was created. Default is 4 hours.

Parameters

Name Description Type Possible / Default Values
threshold Hours Difference Numeric 4

AD Computer Attributes

Retrieves Active Directory computer attributes from the Tools\AdQuery\compAttr.dat file.

Parameters

Name Description Type Possible / Default Values
type Attribute Type Selection

Mandatory
Optional

attr Attribute Name Text

Has Stale AD Attributes

Returns True or False based on user provided number of hours the Tools\AdQuery\compAttr.dat file should be considered stale. Compares the current time against the time the dat file was created. Default is 4 hours.

Parameters

Name Description Type Possible / Default Values
threshold Hour Difference Numeric 4

Actions

Deploy Get AD Computer Attributes


Packages:

Deploy Get AD Local Administrators


Packages:

Retrieved from "https://kb.tanium.com/wiki/index.php?title=ADQuery_1.0.0.0022&oldid=23117"