Hello,
I would like to create an Analysis to get a list of scheduled tasks running on a group of computers, but I do not want to include those authored by Microsoft Corporation. Below is the code I have so far, but it returns a false or true instead of excluding them all together. Is there a way to list only those not authored by Microsoft?
(name of it, user id of principal of definition of it, author of registration info of definition of it is not "Microsoft Corporation") of scheduled tasks
Thanks in advance (this analysis and relevance is new to me, just trying to figure this all out!).
G
When you gather multiple items from an object, they are returned as a TUPLE. Use ITEM x OF to refer to the desired item where 0 is the first item.
(names of it, user id of principal of definition of it, author of registration info of definition of it) whose (not ((Item 2 of it as lowercase) contains "microsoft corporation")) of scheduled tasks
NOTE: On my system, there were items Authored by Microsoft Corporation AND Microsoft. You can adjust the text to exclude the items as you desire.
I would probably get the set of scheduled tasks this way:
scheduled tasks whose( exists authors whose(it as lowercase does not contain "microsoft") of registration infos of definitions of it )
This should be more efficient because you are filtering them first before returning all of the properties you want of them.
Then to get the data you are looking for, you just add onto it like this:
(name of it, user id of principal of definition of it, author of registration info of definition of it) of scheduled tasks whose( exists authors whose(it as lowercase does not contain "microsoft") of registration infos of definitions of it )
This also has the advantage that the first relevance statement doesn’t change depending on what you want to return.
This is great information, thank you so much for the quick responses, it works like a charm. One caveat though, it seems it does not work for Windows 2003 servers (yes, we still have some of those).
