IC host checker policy for USB, DOMAIN check etc

[aeroplane_]

Hi

I would like to know how to configure the host checker policies to detect below on the end points:

1- USB is disabled or not

2- Users should be on domain like abc.com

3- The netbios name for domain should be ABC

4- Skype/Bit torrent software should not be installed

Can any one advice me how to configure above on IC?

Thanks

[Winston_ · Accepted solution]

Hi,

All the above host checker is very straight forward except the USB check

1- USB is disabled or not

- Doing testing for USB once it is done will post

Create a New Hostchecker Policy

2- Users should be on domain like abc.com

Add Custom: registry Setting

Rule Name: domain_name_check

Registry Subkey:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters

Name: Domain

Typetring

Value:abc.com ( type in the domain name you want to check)

3- The netbios name for domain should be ABC

Add Custom: Netbios

Rule Name:Netbios_check

NetBIOS Names:ABC

Select the <<required>> radio button

4- Skype/Bit torrent software should not be installed

Add Custom: Process

Rule Namekype_Deny_Check

Proess Namekype.exe /*The actuall exe file name*/

Select the <<Deny>> radio button

Md5 Checksum (optional): You can use md5 calculator and generate the checksum /* the checksum will vary for different skype version so better not to use in this case */

regards

LPW

[aeroplane_]

Thanks dear

Can you please also suggest:

1- USB enable/disable check?

2- Is there any way to ensure by IC that enperise allowed standard softwares are installed on PC or not with some registry check etc? Because it would be very difficult to check software using the process rule on IC.

Thanks

[Winston_]

Hi,

As of UAC 4.0 there is no option to check for standard list of software. and you know that the standard list of software varies for different organization.

I dont see any road map or requirement for the same. As of now you can check only through process

with regard to USB we can do check whether it is enabled or disabled.

Check the following registry settings "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor\Start"

The value for start = 4 , then usb is disabled and any other value indiacates usb is enabled.

regards

LPW

[aeroplane_]

Thanks you very much