Need RSA SA Windows Device Configuration Script File

[RSAAdmin]

Dear Community Members,

We have Almost 10000 Windows Server 2008 and 2008 R2 Server in our environment.Every Time we can not log into each server and configure RSA SA Windows Device integration command.

Can we configure those command via any script file or any batch file ?

We are configuring HTTP Method as per RSA windows document.Can you please provide only HTTP method script file so that we can integrate 10000 windows server.

Your favorable reply highly appricate.

Regards,

Deepak Solanki

[RSAAdmin]

Hi I used a tool called PDQ Deploy in my test lab and used a batch file containing the following:

cscript.exe useradd.vbs

cscript RSA_enVision_winevent_config.vbs http

net localgroup "event log readers" winrm@WAUGH.LOCAL /add

My Domain is WAUGH.LOCAL and my user is called winrm@WAUGH.LOCAL

The final line adds the user to the local event log readers group.

[DeepakSolanki]

Hi All,

Thank you for the support.

I am having one more query on above question.

We are planning to do automation of device Integration and disintegration for below mentioned Event sources from RSA VLC end.

Windows Server -- WinRM

File Share  -- SFTP

If some one can help me on this requirement. For Windows Integration Is it possible to do Command line configuration on VLC ans same thing for Fileshare Mechanism

Regards,

Deepak Solanki

[JeremySamiec]

Yes, I too would like to know the best way to configure windows servers and add them to NetWitness. The process I have right now (Windows Event Forwarding) has its own set of issues. However, the running of scripts on a bunch of host servers is not reliable and then having to create and import CSV's is a manual process.

is there anything more automated?

[JohnSantos]

Can you share the steps you did to install the RSA Windows Agent via PDQ?