How do I modify this relevance to make this clause relevant to machines that don’t have “mana”
if exists folder “c:\program files\vpn 3000\profiles” then names whose (it as lowercase not starts with “mana”) of files of folder “c:\program files\vpn 3000\profiles” else if exists folder “c:\program files\Cisco systems\vpn client\profiles” then names whose (it as lowercase starts with “mana”) of files of folder “c:\program files\cisco systems\vpn client\profiles” else error “file not found”
if exists folder “c:\program files\vpn 3000\profiles” then names whose (not (it as lowercase starts with “mana”)) of files of folder “c:\program files\vpn 3000\profiles” else if exists folder “c:\program files\Cisco systems\vpn client\profiles” then names whose (it as lowercase starts with “mana”) of files of folder “c:\program files\cisco systems\vpn client\profiles” else error “file not found”
((name of operating system = “WinXP” OR name of operating system = “WinVista”) AND (not exists key “HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.” of native registry)) or ((exists key “HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.” whose (exists value “ProgramVer” whose (string “10.0” != it) of it) of native registry)) and not exists file “c:\Program Files\Zone Labs\Integrity Client\iclient.exe”
I’m trying to exclude server versions but the relevance comes back as true.
I want to include all workstations and exclude all servers who have versions less than 10.0 or not installed at all. I’m using this same exact relevance except for this statements is different…
(not exists key “HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.” of native registry)
Do you want a relevance which will only target machines where:
Windows XP/Vista is installed
AND
(
There is no key “HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.”
OR
There is a key “HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.” but the value “ProgramVer” is different from “10.0”
OR
There is no file “c:\Program Files\Zone Labs\Integrity Client\iclient.exe”
)
?
If yes, here is a relevance that should work:
(name of operating system = “WinXP” OR name of operating system = “WinVista”) AND (not exists file “c:\Program Files\Zone Labs\Integrity Client\iclient.exe” OR ((not exists it) OR (exists it whose (exists value “ProgramVer” whose (it as string != “10.0”) of it))) of key “HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.” of native registry)
The last part (not exists file “c:\Program Files\Zone Labs\Integrity Client\iclient.exe”) was outside of the OR block.
So all computers without iclient.exe were reporting true!
When you experience a problem with a relevance statement, it is really useful to use the “Indent Relevance” in the relevance debugger. That will give you a “graphical” view of your relevance blocks.
That’s how i saw that the test around the iclient.exe existence was outside of the OR block.
You can also have a look at our Fixlet Debugger (it also includes the Relevance Debugger) but keep in mind this is an alpha version so there are some limitations.
I ask this because the BigFix/TrendMicro module is installed on my machine, and the “ProgramVer” value is 1.0. But maybe you are not using this module.
Another reason could be that the path to the iclient.exe executable is wrong.
If you have a machine with TrendMicro 10.0 installed, can you check the registry key path and value and also the path to the executable?
it works. This the relevance for another task that just does the registry changes.
(name of operating system = “WinXP” OR name of operating system = “WinVista”) AND ((exists key “HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.” whose (exists value “ProgramVer” whose (string “10.0” != it) of it) of native registry)) and not exists file “c:\Program Files\Zone Labs\Integrity Client\iclient.exe”