+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 22
Windows Thread, Log entry if RAM is removed? in Technical; I think (and a few google searches seem to suggest) that windows doesn't record when a stick of ram is ...
  1. #1


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,715
    Thank Post
    288
    Thanked 789 Times in 616 Posts
    Rep Power
    226

    Log entry if RAM is removed?

    I think (and a few google searches seem to suggest) that windows doesn't record when a stick of ram is added to or removed from a machine.

    Unless someone here knows otherwise?

    Cheers

    Pete

  2. #2

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,850
    Thank Post
    110
    Thanked 598 Times in 514 Posts
    Blog Entries
    1
    Rep Power
    227

    Re: Log entry if RAM is removed?

    I think you can get the information from WMI on how many sticks are in the machine. If you record this information at bootup (say in a database) that'd get you what you want.

  3. #3


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,715
    Thank Post
    288
    Thanked 789 Times in 616 Posts
    Rep Power
    226

    Re: Log entry if RAM is removed?

    Thanks - will look into that. We currently run psinfo to grab data every so often, but a daily script on boot would give us better data for sleuthing purposes.

    Unfortunately, the horse has bolted - this is for the next time some little XXXX nicks RAM.

  4. #4

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    10,051
    Thank Post
    3,583
    Thanked 1,123 Times in 1,025 Posts
    Rep Power
    377

    Re: Log entry if RAM is removed?

    Sysinternals @ www.sysinternals.com do a neat little utility called bginfo
    which will display info like that on the desktops background for ya

    If that does not help you could either use scriptomatic 2.0 to help you with the vbscript using wmi to attain the info and get the vbscript to append to the same text file on a network share or shared drive or something to that extent so that you get something like so :

    machine name ---> xxxMb of memory installed

    or what ever output you want, depends what output you are looking for exactly.

    If you want I could help you later on with wmi and vbscript

  5. #5

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    10,051
    Thank Post
    3,583
    Thanked 1,123 Times in 1,025 Posts
    Rep Power
    377

    Re: Log entry if RAM is removed?


  6. #6

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    10,051
    Thank Post
    3,583
    Thanked 1,123 Times in 1,025 Posts
    Rep Power
    377

    Re: Log entry if RAM is removed?

    Did a quick search on google and this looks like something that may be of interest to you

    http://www.majorgeeks.com/CS_Fire_Monitor_d4243.html

  7. #7


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,715
    Thank Post
    288
    Thanked 789 Times in 616 Posts
    Rep Power
    226

    Re: Log entry if RAM is removed?

    Quote Originally Posted by gecko
    Yeah, we're thinking of using that for an "things thou shalt include in any error reports" instructions.

    Thanks for all the suggestions, perhaps I should have clarified my question earlier...

    Some kids have stolen RAM from 3 machines. We know when we last checked for memory tallies in the room and we'll be doing that more regularly through a startup script using some / all of the idea mentioned upthread.

    What I was looking for (but didn't really expect to find) was a pre-existing log or text file somewhere in which Windows had mentioned "I appear to have less / more RAM than the last time I booted up", so I could narrow down the timeframe when I wade through CCTV footage.

    It seems that without us pre-empting the possibility (and setting up a monitoring script / program of some sort), it doesn't record it.

    Cheers.

    Pete

  8. #8

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    10,051
    Thank Post
    3,583
    Thanked 1,123 Times in 1,025 Posts
    Rep Power
    377

    Re: Log entry if RAM is removed?

    The only way or thing I can think of with regards to that would be when you install XP doesnt it use HAL to see what hardware you have installed etc, so it makes me wonder, doesnt it store any info like that in WINNT.inf or anything like that ? Just a thought.

  9. #9
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,987
    Thank Post
    275
    Thanked 52 Times in 46 Posts
    Blog Entries
    2
    Rep Power
    48

    Re: Log entry if RAM is removed?

    Like the look of CSFire gecko

  10. #10

    russdev's Avatar
    Join Date
    Jun 2005
    Location
    Leicestershire
    Posts
    6,985
    Thank Post
    735
    Thanked 559 Times in 374 Posts
    Blog Entries
    3
    Rep Power
    206

    Re: Log entry if RAM is removed?

    Quote Originally Posted by pete
    Quote Originally Posted by gecko
    Yeah, we're thinking of using that for an "things thou shalt include in any error reports" instructions.

    Thanks for all the suggestions, perhaps I should have clarified my question earlier...

    Some kids have stolen RAM from 3 machines. We know when we last checked for memory tallies in the room and we'll be doing that more regularly through a startup script using some / all of the idea mentioned upthread.

    What I was looking for (but didn't really expect to find) was a pre-existing log or text file somewhere in which Windows had mentioned "I appear to have less / more RAM than the last time I booted up", so I could narrow down the timeframe when I wade through CCTV footage.

    It seems that without us pre-empting the possibility (and setting up a monitoring script / program of some sort), it doesn't record it.

    Cheers.

    Pete
    but how did no one notice kids with leads open on pcs

    russ

  11. #11

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    10,051
    Thank Post
    3,583
    Thanked 1,123 Times in 1,025 Posts
    Rep Power
    377

    Re: Log entry if RAM is removed?

    I didnt know sticks of ram included leads, its just a case of pushing a clip down on either side of the stick of ram to make the memory module pop out and then you pull it out slip the case back on and bingo.

    Not that ive stolen ram before but I have inserted and taken ram out of a machine before ( which also includes building my own machines )

  12. #12
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,987
    Thank Post
    275
    Thanked 52 Times in 46 Posts
    Blog Entries
    2
    Rep Power
    48

    Re: Log entry if RAM is removed?

    lids - lids!!!

  13. #13
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,987
    Thank Post
    275
    Thanked 52 Times in 46 Posts
    Blog Entries
    2
    Rep Power
    48

    Re: Log entry if RAM is removed?

    That's the thing isn't it Russ. Happened here recently - poor old science tech was blamed for not securing the room well enough. Dunno how the hell it happened - have my suspicions.
    These PC's of mine only have 1 stick of ram - so you could get the last time it was accessed if the culprits had to down the PC to remove the ram.

    What about using AIDA32 network version? I had that set up to take an audit at every boot up [quite a simple thing to do - nothing has to be installed on the clients either] - was unnoticeable performance wise, runs silently of course, and gives a nice thorough set of stats.

  14. #14

    Join Date
    Jul 2005
    Location
    Corby
    Posts
    1,056
    Thank Post
    12
    Thanked 20 Times in 18 Posts
    Rep Power
    25

    Re: Log entry if RAM is removed?

    Quote Originally Posted by gecko
    I didnt know sticks of ram included leads, its just a case of pushing a clip down on either side of the stick of ram to make the memory module pop out and then you pull it out slip the case back on and bingo.

    Not that ive stolen ram before but I have inserted and taken ram out of a machine before ( which also includes building my own machines )
    LOL!

    Yeah. Erm. LIDS as the man said. I would think Russ would know RAM doesn't have leads. Aherm.

    ops:

    Paul

  15. #15

    Join Date
    Feb 2006
    Location
    Dorset/Hants
    Posts
    87
    Thank Post
    2
    Thanked 13 Times in 10 Posts
    Rep Power
    20

    Re: Log entry if RAM is removed?

    Not sure what the etiquette/protocol is for sending code snippets but here is a small part of our machine inventory script which is run every time a machine boots.

    The full version records the details we want - HD size/space, motherboard type/ processor /installed apps (in uninstall reg) etc.. It records results as simple text files in 2 folders (hardware/software) on a server and I have a viewer that lets us monitor the results.

    Can't remember the reason for the size check in the script - I assume I got spurious results when testing it, oh and we have a small number of machines which lie - they should have 256Mb RAM but show up by this as 64/128Mb and via GUI machine properties 192Mb !

    You could easily make it keep track of RAM size in a text file/reg and if changed then notify.

    Tim
    Attached Files Attached Files



SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. MRBS - Entry Types
    By Mauger in forum Network and Classroom Management
    Replies: 5
    Last Post: 9th January 2008, 12:38 PM
  2. getting 'you tube' videos removed?
    By markman in forum General Chat
    Replies: 8
    Last Post: 16th October 2007, 04:16 PM
  3. Adding DNS Entry
    By thegrassisgreener in forum Windows
    Replies: 13
    Last Post: 2nd October 2007, 11:17 AM
  4. Advertising Post Removed
    By AditSoft in forum Educational Software
    Replies: 2
    Last Post: 19th October 2006, 08:25 PM
  5. Slashdot RSS feed removed
    By Dos_Box in forum General EduGeek News/Announcements
    Replies: 9
    Last Post: 16th December 2005, 01:32 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •