Running EntAudit.exe

You can run EntAudit.exe, on the disconnected machine that you want to audit, either from the windows command prompt or by double clicking on this from within Windows itself. For example, if you have EntAudit.exe on a 3.5" floppy disk, which you have inserted into the floppy disk drive of the disconnected machine, you would do the following:

1.	Select Start \| Run... from the Windows start menu.

2.	Type Command in the run dialog and click OK (This will open the Windows command prompt)

3.	To change to the floppy disk drive type A: and press Enter

4.	Type EntAudit and press Enter to run EntAudit.exe

ENT audit will then audit the disconnected machine and save the results of the audit to the an audit snapshot file.

By default, the audit snapshot file will be saved in the directory where EntAudit.exe is located and will be named MACHINE_NAME.esp, (where MACHINE_NAME is the name of the machine that you are auditing). For example, if the name of the machine that we were auditing above were "Zeus" then EntAudit would save the results of the audit to the file A:\ZEUS.esp.

You can also provide the output directory as a parameter to EntAudit. For example, if you ran EntAudit by typing entaudit G:\Temp\some_file.esp then EntAudit would audit the machine and then save the results to the file G:\Temp\some_file.esp.

TIP: You can get help for EntAudit.exe, from the command prompt, by typing "EntAudit /?" and pressing the enter key.