Need some help in building a PowerShell Script

Question

I am in the process of setting up continuous self-auditing on a set of computers that are on a Domain. My company has a restriction on use of USB devices as well as CDs/DVDs. The domain pushes patches but we have been seeing some users that are using (or
trying to) the network without becoming a part of the domain. My aim is to run a PowerShell script periodically (say, hourly) on each computer on the domain and dump certain parameters to XML / XHTML and then load these onto a web-server that can display the
results in a (sort of) dashboard to flag anomalies like unauthorised USB use etc.
I know there must be some commercial products for this but the boss says "No" to a purchase. 
Am I on the right track or do I need to change my approach? Also, is there a starting scirpt available somewhere so that I can study it for techniques? My major problem is the display part. I am able to dump it into XML and (sort of ) format it but how do
I collate the data and display it as a web-page is what is bothering me. Help would be deeply appreciated.

Answer 1

@JRV:
Users don't have to be domain administrators
to be able to install software. Local admin is more than enough. ie: I am no admin in the domain of my customer but am allowed to install software
Although I agree with you, in the sense it would be easier to restrict the users, it doesn't mean that a company has to do it that way; and it certainly doesn't represent the intelligence of an individual. 
@SarabRSingh:
What you are asking for is a lot of work, to get the script right (considering the special demands, ie. AV update checking is different depending on the SW) and it might require a lot of resources on the client.
From what you describe, you want to prevent any USB/Optical Media use. You should consider Group Policies to manage that. http://technet.microsoft.com/en-us/library/bb742376.aspx
The only part I would script (based on my work environment) is the checking of AV updates (gets tricky because our SW has a hard time forcing the user to update when connected by VPN).
user log in / out --> group policy: logon/off script writing appending timestamp to a file
has he/she used any USB device --> if you want to block it: GPO, if you only want to track it: powershell
Get-WmiObject Win32_USBControllerDevice
has any new application / software been installed: restrict installation completely with user permissions or: http://social.technet.microsoft.com/Forums/en-US/f4dc8ab9-370b-423e-b65d-1fa46fa9bcc4/powershell-script-to-remotely-audit-computers-on-lan?forum=ITCG
was the AV: no idea on what you are using (maybe: http://serverfault.com/questions/129611/how-to-detect-when-antivirus-is-out-of-date-with-powershell
OS updated: WSUS http://technet.microsoft.com/en-us/library/cc708519(v=ws.10).aspx
If you found this post helpful, please "Vote as Helpful". If it answered your question, remember to "Mark as Answer"
MCC & PowerShell enthusiast
http://oliver.lipkau.net/blog