Forum Discussion

JWood's avatar
JWood
Icon for Nimbostratus rankNimbostratus
Aug 08, 2019

APM Detecting which Windows Feature update is installed

The APM Access-profile has built-in settings to detect which version of windows and service pack is installed on a device. This is fine with older versions of windows but Windows10 is now the stable ongoing version with regular feature updates. there does not seem to be an easy way to detect which version of "windows feature update" is installed. I would like to restrict access to a certain level of windows (eg 1803) and above but F5 does not seem to recognise this.

How can an APM profile check be made to restrict login to devices with a certain feature update or newer?

  • not a huge windows expert, but perhaps there is a registry to look at?

     

    beyond that a ticket with f5 support might be a good idea, you probably aren't the first with this request. kinda expecting a Request For Enhancement already existing for this.

  • JWood's avatar
    JWood
    Icon for Nimbostratus rankNimbostratus

    Thanks for your reply. Looking further, the following registry setting (or similar, haven't tested yet!) seems to be the one to use for now

    "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ReleaseId"  >= "1803"

     

    • super, thanks for sharing that.

       

      if you have the time and a support contract run it by F5 support also, they might have some other way.