Forum Discussion

Peter_Wang_7400's avatar
Peter_Wang_7400
Icon for Nimbostratus rankNimbostratus
Jul 19, 2011

APM client side check - Registry and Windows File

My client wants to check whether a pc is a valid company SOE based on three conditions - Domain, Antivirus and SOE image version. All three checks need to be passed.

 

 

The domain and antivirus checks use registry but there are different flavors for each. Can I combine the registry check expression like something below? I prefer not to create two registry check boxes if possible.

 

 

 

("\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters"."Domain"=[a.abc.com,b.abc.com]) AND ("\HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion"."Parent"=[server1,server2]

 

 

Also for windows file check, which directory does APM look for on the client pc? And the file version varies from 3.3 to 5.1.2.

 

 

Thanks.

 

Peter

 

  • You can do the AND or OR statement if you so desire. It's quite flexible.

     

     

    Can you be more specific on the second question. It's a little vague.
  • This is what I have configured at the moment. I have two separate checks: one for each registry key.

     

     

    \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters ."Domain"="a.abc.com" OR "\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters "."Domain"="b.abc.com" OR "\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters "."Domain"="c.abc.com"

     

     

    \HKEY_LOCAL_MACHINE \SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion."Parent"= "server1" OR "\HKEY_LOCAL_MACHINE \SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion"."Parent" = "server2" OR "\HKEY_LOCAL_MACHINE \SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion"."Parent" = "server3"

     

     

    However, this is not working. It says “Access was denied by the access policy. This may be due to a failure to meet access policy requirements”

     

     

    The Windows file check is actually fine. I wasn't sure if APM could take the whole path in the field.

     

     

    C:\Windows\System32\OEMINFO.INI

     

     

    Any advice for the registry check?
  • So on the Firepass this will work. My APM license expired so I can't test at the moment.

     

     

    You may have the syntax wrong, this is what it is on the Firepass. I forgot the exact APM syntax.

     

     

    ("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters"."Domain"="a.abc.com")