Thanks, that's what was throwing me through a loop.  Started noticing the Last Evaluation time wasn't updating so the light bulb came on J

 

From: admin@lists.myITforum.com [mailto:admin@lists.myITforum.com] On Behalf Of Troy Martin
Sent: Tuesday, July 07, 2009 10:44 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Configuring DCM to detect (Default) Value name

 

Keep in mind the following, when/after updating or modifying a baseline or CI:

 

ImportantImportant

The client's compliance evaluation results are cached locally, for 15 minutes. Unless the client has received notification from its configuration baseline assignment that configuration data has been modified since its last evaluation, the client will not re-evaluate its compliance within this 15 minute window, even if you specify a shorter evaluation compliance schedule or click Evaluate in the Configurations tab.

 

 

http://technet.microsoft.com/en-us/library/bb680847.aspx

 

 

Troy L. Martin | Senior Consultant | 1E |

Mobile: 678 898 6147 | US/Canada Toll Free: 1 866 592 4214

troy.martin@1e.com | www.1e.com

 

From: admin@lists.myITforum.com [mailto:admin@lists.myITforum.com] On Behalf Of Rimmerman, Russ
Sent: Tuesday, July 07, 2009 11:28 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Configuring DCM to detect (Default) Value name

 

OK, I just refreshed after downloading and applying policies and it worked this time (I think my client was a CI version behind what I thought I was after I changed it to what you said).  Thanks a mil.

 

From: admin@lists.myITforum.com [mailto:admin@lists.myITforum.com] On Behalf Of Sherry Kissinger
Sent: Tuesday, July 07, 2009 10:20 PM
To: mssms@lists.myitforum.com
Subject: RE: [mssms] Configuring DCM to detect (Default) Value name

 

It depends what you want to be a compliant state.

 

If the default value should be "C:\WINDOWS\system32\ieframe.dll", then it should be a equals comparison.  If it does equal that, then it'll be compliant.

 

If what you want compliant to be "if there is a value in there, it better not be this:  C:\WINDOWS\system32\ieframe.dll", then the rule you had of "it's compliant if there is no value at all, but if you do find a value, if it equals "C:\WINDOWS\system32\ieframe.dll", then that's non-compliant.  That would mean if there is anything other than c:\windows\system32\ieframe.dll, then that's perfect.

Sherry Kissinger
Microsoft MVP - ConfigMgr
mofmaster@myitforum.com

--- On Tue, 7/7/09, Rimmerman, Russ <Russ.Rimmerman@c-a-m.com> wrote:

From: Rimmerman, Russ <Russ.Rimmerman@c-a-m.com>
Subject: RE: [mssms] Configuring DCM to detect (Default) Value name
To: mssms@lists.myitforum.com
Date: Tuesday, July 7, 2009, 10:09 PM

OK I must be doing it wrong, I did string not equals C:\WINDOWS\system32\ieframe.dll, and unchecked the non-compliance box.

 

From: admin@lists.myITforum.com [mailto:admin@lists.myITforum.com] On Behalf Of Sherry Kissinger
Sent: Tuesday, July 07, 2009 9:59 PM
To: mssms@lists.myitforum.com
Subject: Re: [mssms] Configuring DCM to detect (Default) Value name

 

Done testing in my lab.... works fine for me.  If using Hive HKEY_CLASSES_ROOT.

 

Key: TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0\win32

Value Name: is blank

Validation tab: report non-compliance if greater than 0, and

   data type String, Equals  C:\WINDOWS\system32\ieframe.dll


Sherry Kissinger
Microsoft MVP - ConfigMgr
mofmaster@myitforum.com

--- On Tue, 7/7/09, Rimmerman, Russ <Russ.Rimmerman@c-a-m.com> wrote:

From: Rimmerman, Russ <Russ.Rimmerman@c-a-m.com>
Subject: [mssms] Configuring DCM to detect (Default) Value name
To: mssms@lists.myitforum.com
Date: Tuesday, July 7, 2009, 9:39 PM

I'm having issues trying to monitor HKCU\TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0\win32 for a value not equaling C:\WINDOWS\system32\ieframe.dll

 

The String Value name is (Default).  For the value name I've tried (Default), leaving it blank, and @ and every time it comes back non-compliant even though my PC has the correct registry value for the key.

 

I have both the Settings validation non-compliance event for instance count and the Objects non-compliance event for instance count unchecked.

 

The rule in the xml looks like this:

  <sch:assert test="(@xsi:nil = 'true' or ((mssmlfn:stringCompare(.,'C:\WINDOWS\system32\ieframe.dll',true()) != 0)))" mssml:category="dcm:None" mssml:severity="warning" dci:DigestElement="Rule_9838def0-e627-409c-ac38-d5cc257f7bd3" dci:ModelTestElement=".">*** *** *** id=Rule_9838def0-e627-409c-ac38-d5cc257f7bd3 dci:DigestElement=Rule_9838def0-e627-409c-ac38-d5cc257f7bd3 *** *** ***</sch:assert>

  </sch:rule>

 

Any ideas??

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information of Cameron and its Operating Divisions. Any unauthorized use or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply email and delete and destroy all copies of the original message inclusive of any attachments.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/


==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information of Cameron and its Operating Divisions. Any unauthorized use or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply email and delete and destroy all copies of the original message inclusive of any attachments.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/


==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information of Cameron and its Operating Divisions. Any unauthorized use or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply email and delete and destroy all copies of the original message inclusive of any attachments.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/

 



DISCLAIMER: This is a PRIVATE AND CONFIDENTIAL message for the ordinary user of this email address. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind 1E to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose.

==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information of Cameron and its Operating Divisions. Any unauthorized use or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply email and delete and destroy all copies of the original message inclusive of any attachments.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/

Published with BlogMailr



Trackbacks

No Trackbacks

Comments

No Comments