Create Global Condition Dialog Box

AdminStudio 2021 | 21.0 | Application Manager

The Create Global Condition dialog box, which is opened by clicking the Create button on the Create Custom Requirements panel of the Requirements Wizard, is used to create a condition to use in the custom requirement.

The fields displayed on this dialog box depend upon what is selected in the Setting Type field. The Create Global Condition dialog box includes the following properties:

Create Global Condition Dialog Box Properties

Property

Description

Name

Enter a name for this global condition.

Description

Enter a description to identify the purpose of this global condition.

Condition Type

Select one of the following options:

•

Setting—Select to create a standard condition.

•

Expression—Select to create a condition which contains expressions, as described in Building Expressions.

Setting Type

Select one of the following options to identify the type of global condition that you are creating (the item you want this condition to assess for compliance):

•

Active Directory query - Select to specify a condition to assess a Active Directory query

•

Assembly - Select to specify a condition to assess an assembly from the global assembly.

•

File system—Select to specify a condition to assess a file or folder.

•

IIS metabase—Select to specify a condition to assess an IIS metabase.

•

Registry key—Select to specify a condition to assess a registry key.

•

Registry value—Select to specify a condition to assess a registry value.

•

Script—Select to specify a condition to find a script and return a value to be assessed.

•

SQL query—Select to specify a condition to assess an SQL query.

•

Wql query—Select to specify a condition to assess a Windows Management Instrumentation Query Language (WAL) script.

•

XPath query—Select to specify a condition to assess an XML file and XPath query.

Data Type

Select one of the following options to identify this condition’s data type:

•

String

•

Date and Time

•

Integer

•

Floating point

•

Version

•

Boolean

•

String array

•

Integer array

Note:Only displayed for conditions with a Setting Type of IIS metabase, Registry value, Script, Sql query, Wql query, and XPath query. Also, the number Data Type options that are listed depends upon the Setting Type selected.

The rest of the properties on the Create Global Condition dialog box are dependent upon the Setting Type selection:

Create Global Condition Dialog Box / Properties for Each Setting Type

Setting Type

Property

Description

Active Directory query

LDAP Prefix

Enter Valid LDAP Prefix in this format <Prefix Name>://

Distinguished Name

Enter the distinguished name

Search Filter

Enter a valid search filter

Search Scope

Select one of the following options:

•

Base

•

One Level

•

Subtree

Property

Enter Property value for a specified DN

Query

Displays the generated query based on the above inputs

Assembly

Assembly Name

Enter a valid Assembly Name

File system

Type

Select either File or Folder.

Path

Enter the path to the file or folder you want to use to assess for compliance on computers.

File or folder name

Enter the file or folder name.

Include subfolders

Select to include the file or folder’s subfolders in the condition.

This file or folder is associated with a 64 bit application

Select if the specified file or folder is associated with a 64-bit application.

IIS metabase

Metabase path

Enter the path to the IIS metabase.

Note:The metabase is a structure for storing Microsoft IIS configuration settings. It performs some of the same functions as the Windows system registry but is specific to IIS.

Property ID

Enter the property ID of the specified IIS metabase.

Registry key

Hive

Select the hive of the registry key that you want to use in this condition.

Key

Enter the registry key that you want to use in this condition.

This registry key is associated with a 64-bit application

Select if the specified registry key is associated with a 64-bit application.

Registry value

Hive

Select the hive of the registry key that contains the value that you want to use in this condition.

Key

Enter the registry key that contains the value that you want to use in this condition.

Value

Enter the registry value that you want to use in this condition.

This registry value is associated with a 64-bit application

Select if the specified registry value is associated with a 64-bit application.

Script

Script Type

Select one of the following options:

•

PowerShell

•

VBScript

•

JScript

Script box

Click Browse and select the script that you want to use in this condition. After you have selected a script, the contents of that script will be listed in this box.

Run script by using the logged on user credentials

Select this option if you want to run the script using the credentials of the logged on user.

Sql query

SQL server instance

Select one of the following options to specify the server instances you want to use in this condition:

•

Use default instance

•

All instances

•

Instance name

Database

Specify database.

Column

Specify column.

Transact SQL statement

Enter SQL statement.

Wql query

Namespace

Enter the namespace that contains the WQL script.

Class

Enter class.

Property

Enter property.

WQL query WHERE Clause

Enter WQL query.

XPath query

Path

Enter path.

File Name

Enter file name.

Include sub folders

Select to include subfolders.

This file is associated with 64 bit application

Select to indicate that this file is associated with a 64-bit application.

XPath Query

Click the Namespace button to open the XML Namespaces dialog box, where you can specify the XML namespaces and prefixes that you want to use when this XPath query runs.

Click Open to select a text or XML file containing an XPath query.

Click Clear to clear the text box.

Note:For information on adding a namespace, see XML Namespaces Dialog Box.

Building Expressions

To create a global condition that uses expressions, select Expression from the Condition Type list. When you select Expression from this list, an expression builder interface is displayed.

You can use the expression builder interface to form an expression using existing User/Device/Custom requirements. After you add multiple requirements, you can then connect them using AND or OR operators, and can group sets of clauses, which enables you to create complex requirements.

The expression building area of this dialog box includes the following options:

Create Global Condition Dialog Box
Option	Description
Add Clause	Click to open the Requirement Wizard, which you can use to add a User/Device/Custom requirement. When you click Finish on the wizard, the new requirement will be listed in the Clauses list. When you add the first requirement the Connector will be set to None. When adding subsequent requirements, the Connector will be set to AND by default.
Edit Clause	Click to edit the selected requirement using the Requirement Wizard.
Remove Clause	Click to delete the selected requirement.
Group Clauses	Click to group the selected requirements (if the grouping criteria matches). If grouping is successful, then the selected requirements will be marked as grouped and parentheses will be displayed the ( and ) columns.
Ungroup Clauses	Click to ungroup the selected requirements, if the ungroup criteria matches.
Preview	Lists the full expression.

Create Global Condition Dialog Box

AdminStudio 2021 Help Library

April 2021