Hello,
I have several questions about Windows scripts, sorry but this technology is new for me:
1. How to know if somenone has executed a remote wmi script against a computer, I mean, what kind of logs do you have for Windows XP SP3?
2. By default, what are the security permissions to execute remote scripts in a Windows domain with Windows XP clients?
3. How to disable this service if it is posible or the remote execution?
4. When a remote script is executed in a client, what process is generated? is it local or remote from the machine in which it executes.
5. Do anybody know how to monitoring this service using any program, script or software which can tell you when a script was executed and from where and who launched it?
Best Regard and thanks in advance.