These are the instructions for the EY/Mercury VBS scripts.

*** Auditor Instructions ***
DO NOT RUN/TEST THE WINDOWS VBS SCRIPTS ON YOUR FIRM LAPTOP! You will query the EY domain controllers and active directory. If you'd like to test the scripts, please utilize the Tool Servers in the LTD Sandbox:
http://chs.iweb.ey.com/CHS/US/AABS/ISAAS_ERISK/CONTROL.NSF/welcomeutility/Technology/$file/LTDindex.htm

Note: Result of the script output depends on the configuration of each individual system. Thus, the script may not always extract all of the information needed. Review the output file after creation and note any additional manual review steps that need to be performed according to Manual Review Procedures.

Please ensure you distribute the .vbs file, the instructions, and the utility files listed below to the client. Also, call the client's attention to the Legal Disclosure at the bottom of this file.

The client will need to run the scripts on each host to be reviewed. To run this script, place the .vbs file and the utilities in the same directory on the target system and launch it. For each system reviewed, there should be one text output file and one html output file.  These files contain the same information, but are presented in both formats.

Depending on the Mercury work steps selected, the Windows scripts may also require the following additional tools to be present with the script to execute
all the work plan steps:
-Dumpsec.exe
-mbsacli.exe (for Patch Maintenance step only)
-wusscan.dll (for Patch Maintenance step only)

These files can be downloaded obtained from EY Mercury (download Windows Script Utilities.zip

***Steps to perform for Patch Maintenance Scripts***
Obtain the most current version of wsusscn2.cab from http://go.microsoft.com/fwlink/?LinkId=76054

Give the wsusscan.cab file to the client to run with the 
other files.  The Microsoft Baseline Security Analyzer (mbsacli.exe) uses wsusscn2.cab to see what patches should 
be installed.  Please note, when the client runs the script the 
wsusscan.cab file MUST be in the same directory as the script or it will not 
run.

This Windows Script has been tested on the following operating systems:
-Windows 2000 Server
-Windows 2000 Advanced Server
-Windows 2003 Server
-Windows 2008 Server
-Windows XP

If you have any questions about these scripts, please contact the TSRS Technologies Service Desk:
   http://chs.iweb.ey.com/852569b2004b0365
   Click the Technologies tab
   Select Technology Help under the Technology Contacts section


*** Client/System Admin Instructions ***
1. Login to the system as a domain administrator
2. Unzip the files provided by the auditor to a folder. Ensure you have the .vbs file and all utility files. All the files must remain in the same directory for the script to function properly.
3. Run the EY_Script_<technology>_<date>.vbs file by double clicking on the file within windows explorer.
4. The data output will be stored in both plain text and html formatted files in the directory where the script was run from.
5. Zip the text file and change the name of the zip file to the system name and return to the E&Y Professional. 


*** Legal Disclosure ***
The information contained in these instructions and materials provided by Ernst & Young LLP ("E&Y") and any materials or files generated by following these instructions (collectively, "E&Y Materials") contains proprietary, privileged and confidential information (collectively, "Confidential Information") of E&Y, other members of the global Ernst & Young network or their respective affiliates  (collectively "Owners").  Unauthorized use or disclosure of the Confidential Information is prohibited and will result in irreparable harm to the Owners.  Accordingly, none of the Confidential Information may be disclosed, used, referenced, quoted, summarized, or duplicated, in whole or in part, for any purpose other than as specified by E&Y or its client for which the materials or files are being generated.  If you are executing these instructions on behalf of E&Y, deliver the E&Y Materials to E&Y (at 5 Times Square, New York, NY 10036 if not directed otherwise) or an individual authorized by the Owners to receive them.  After doing so, delete the instructions and the E&Y Materials from your computer and do not retain any copies thereof.