Automatic Group Relevance

Content Authoring
1

I have an automatic group for our domain controllers with some caveats. I have the following relevance but no servers will get automatically placed in the group. Can someone point out to me what is incorrect in this statement please?

(windows of operating system) AND (domain controller of operating system) AND (dns name of local computer as lowercase contains "bdo.com") AND (not (exists dns name of local computer whose (it as lowercase contains "horne.com" or it as lowercase contains "gs.hornecanopy.com" or it as lowercase contains "cfo.local")))

Thanks. Here I thought I was getting better at relevance statements.

2

You have a couple of options here to identify DCs

exists key "SYSTEM\CurrentControlSet\Control\ProductOptions" whose (value "ProductType" of it = "LanmanNT") of registry

The relevance I use, uses WMI.

exists unique values whose(4 = it) of integer values of selects "DomainRole from Win32_ComputerSystem" of wmis
OR
exists unique values whose(5 = it) of integer values of selects "DomainRole from Win32_ComputerSystem" of wmis

I am sure there are some other ways too.

3

I’m not sure that’s a valid expression so is probably causing an error thus making the whole expression invalid.

The expression I’ve used for Domain Controller detection using just Bigfix inspectors is

product type of operating system = nt domain controller product type

WMI and registry check are also options, though I have always preferred to use WMI based inspections as a last resort

Q: domain controller of operating system
E: The operator "domain controller" is not defined.

Q: product type of operating system = nt domain controller product type
A: False
T: 0.079 ms
I: singular boolean

1 Like