Thanks, that's what was throwing me through a loop. Started noticing the Last Evaluation time wasn't updating so the light bulb came on J
From: admin@lists.myITforum.com [mailto:admin@lists.myITforum.com] On Behalf Of Troy Martin
Sent: Tuesday, July 07, 2009 10:44 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Configuring DCM to detect (Default) Value name
Keep in mind the following, when/after updating or modifying a baseline or CI:
Important
The client's compliance evaluation results are cached locally, for 15 minutes. Unless the client has received notification from its configuration baseline assignment that configuration data has been modified since its last evaluation, the client will not re-evaluate its compliance within this 15 minute window, even if you specify a shorter evaluation compliance schedule or click Evaluate in the Configurations tab.
http://technet.microsoft.com/en-us/library/bb680847.aspx
Troy L. Martin | Senior Consultant | 1E |
Mobile: 678 898 6147 | US/Canada Toll Free: 1 866 592 4214
troy.martin@1e.com | www.1e.com
From: admin@lists.myITforum.com [mailto:admin@lists.myITforum.com] On Behalf Of Rimmerman, Russ
Sent: Tuesday, July 07, 2009 11:28 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Configuring DCM to detect (Default) Value name
OK, I just refreshed after downloading and applying policies and it worked this time (I think my client was a CI version behind what I thought I was after I changed it to what you said). Thanks a mil.
From: admin@lists.myITforum.com [mailto:admin@lists.myITforum.com] On Behalf Of Sherry Kissinger
Sent: Tuesday, July 07, 2009 10:20 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Configuring DCM to detect (Default) Value name
It depends what you want to be a compliant state.
If the default value should be "C:\WINDOWS\system32\ieframe.dll", then it should be a equals comparison. If it does equal that, then it'll be compliant.
If what you want compliant to be "if there is a value in there, it better not be this: C:\WINDOWS\system32\ieframe.dll", then the rule you had of "it's compliant if there is no value at all, but if you do find a value, if it equals "C:\WINDOWS\system32\ieframe.dll", then that's non-compliant. That would mean if there is anything other than c:\windows\system32\ieframe.dll, then that's perfect.
Sherry Kissinger
Microsoft MVP - ConfigMgr
mofmaster@myitforum.com
--- On Tue, 7/7/09, Rimmerman, Russ <Russ.Rimmerman@c-a-m.com> wrote:
From: Rimmerman, Russ <Russ.Rimmerman@c-a-m.com>
Subject: RE: [mssms] Configuring DCM to detect (Default) Value name
To: mssms@lists.myitforum.com
Date: Tuesday, July 7, 2009, 10:09 PM
OK I must be doing it wrong, I did string not equals C:\WINDOWS\system32\ieframe.dll, and unchecked the non-compliance box.
From: admin@lists.myITforum.com [mailto:admin@lists.myITforum.com] On Behalf Of Sherry Kissinger
Sent: Tuesday, July 07, 2009 9:59 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Configuring DCM to detect (Default) Value name
Done testing in my lab.... works fine for me. If using Hive HKEY_CLASSES_ROOT.
Key: TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0\win32
Validation tab: report non-compliance if greater than 0, and
data type String, Equals C:\WINDOWS\system32\ieframe.dll
Sherry Kissinger
Microsoft MVP - ConfigMgr
mofmaster@myitforum.com
--- On Tue, 7/7/09, Rimmerman, Russ <Russ.Rimmerman@c-a-m.com> wrote:
From: Rimmerman, Russ <Russ.Rimmerman@c-a-m.com>
Subject: [mssms] Configuring DCM to detect (Default) Value name
To: mssms@lists.myitforum.com
Date: Tuesday, July 7, 2009, 9:39 PM
I'm having issues trying to monitor HKCU\TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0\win32 for a value not equaling C:\WINDOWS\system32\ieframe.dll
The String Value name is (Default). For the value name I've tried (Default), leaving it blank, and @ and every time it comes back non-compliant even though my PC has the correct registry value for the key.
I have both the Settings validation non-compliance event for instance count and the Objects non-compliance event for instance count unchecked.
The rule in the xml looks like this:
<sch:assert test="(@xsi:nil = 'true' or ((mssmlfn:stringCompare(.,'C:\WINDOWS\system32\ieframe.dll',true()) != 0)))" mssml:category="dcm:None" mssml:severity="warning" dci:DigestElement="Rule_9838def0-e627-409c-ac38-d5cc257f7bd3" dci:ModelTestElement=".">*** *** *** id=Rule_9838def0-e627-409c-ac38-d5cc257f7bd3 dci:DigestElement=Rule_9838def0-e627-409c-ac38-d5cc257f7bd3 *** *** ***</sch:assert>
</sch:rule>
Any ideas??
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information of Cameron and its Operating Divisions. Any unauthorized use or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply email and delete and destroy all copies of the original message inclusive of any attachments.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/
==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information of Cameron and its Operating Divisions. Any unauthorized use or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply email and delete and destroy all copies of the original message inclusive of any attachments.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/
==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information of Cameron and its Operating Divisions. Any unauthorized use or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply email and delete and destroy all copies of the original message inclusive of any attachments.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/
DISCLAIMER: This is a PRIVATE AND CONFIDENTIAL message for the ordinary user of this email address. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind 1E to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.
==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~