x64bit relevance help

(imported topic written by jpeppers91)

I’m trying to evaluate machines in our environment with the following criteria…

  1. a workstation not server

  2. does not have Trend on it or versions less than version 10

  3. not a 64 bit OS

I have all working but number 3. Can someone see what I’m missing?

(name of operating system = “Win2000” OR name of operating system = “WinXP” OR name of operating system = “WinVista” OR name of operating system = “Win7”) AND (exists value “ProductType” whose (it as string = “WinNT”) of key “HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions” of registry) AND ((not exists it) OR (exists it whose (exists value “ProgramVer” whose (it as string != “10.0”) of it))) of key “HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.” of native registry and not x64 of operating system

(imported comment written by jessewk)

Looks okay to me, except #2 will cause you problems. Try this instead:

not exists keys “HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.” whose (exists value “ProgramVer” whose (it as string as version >= “10.0” as version) of it) of native registry

Also, you can search the forum or the support site for more robust workstation/server relevance

(imported comment written by jpeppers91)

When I use relevance debugger it comes back as False.

(imported comment written by jessewk)

which clause comes back as false?

(imported comment written by jpeppers91)

It;s not evaluating Trend or whether it’s a 64bit machine. I currently don’t have Trend on my box so the relevance should come back true because it’s not not a 64bit machine either. What am i missing?

(imported comment written by jessewk)

One of the following parts of the query is returning false. You need to run these expressions and figure out which one and why:

Q: (name of operating system = “Win2000” OR name of operating system = “WinXP” OR name of operating system = “WinVista” OR name of operating system = “Win7”) AND (exists value “ProductType” whose (it as string = “WinNT”) of key “HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions” of registry)

A: True

Q: not exists keys “HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.” whose (exists value “ProgramVer” whose (it as string as version >= “10.0” as version) of it) of native registry

A: True

Q: not x64 of operating system

A: False