cancel
Showing results for 
Search instead for 
Did you mean: 

IC host checker policy for USB, DOMAIN check etc

SOLVED
aeroplane_
Regular Contributor

IC host checker policy for USB, DOMAIN check etc

Hi

I would like to know how to configure the host checker policies to detect below on the end points:

1- USB is disabled or not

2- Users should be on domain like abc.com

3- The netbios name for domain should be ABC

4- Skype/Bit torrent software should not be installed

Can any one advice me how to configure above on IC?

Thanks

1 ACCEPTED SOLUTION

Accepted Solutions
Winston_
Occasional Contributor

Re: IC host checker policy for USB, DOMAIN check etc

Hi,

All the above host checker is very straight forward except the USB check

1- USB is disabled or not

- Doing testing for USB once it is done will post

Create a New Hostchecker Policy

2- Users should be on domain like abc.com

Add Custom: registry Setting

Rule Name: domain_name_check

Registry Subkey:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters

Name: Domain

TypeSmiley Frustratedtring

Value:abc.com ( type in the domain name you want to check)

3- The netbios name for domain should be ABC

Add Custom: Netbios

Rule Name:Netbios_check

NetBIOS Names:ABC

Select the <<required>> radio button

4- Skype/Bit torrent software should not be installed

Add Custom: Process

Rule NameSmiley Frustratedkype_Deny_Check

Proess NameSmiley Frustratedkype.exe /*The actuall exe file name*/

Select the <<Deny>> radio button

Md5 Checksum (optional): You can use md5 calculator and generate the checksum /* the checksum will vary for different skype version so better not to use in this case */

regards

LPW

View solution in original post

4 REPLIES 4
Winston_
Occasional Contributor

Re: IC host checker policy for USB, DOMAIN check etc

Hi,

All the above host checker is very straight forward except the USB check

1- USB is disabled or not

- Doing testing for USB once it is done will post

Create a New Hostchecker Policy

2- Users should be on domain like abc.com

Add Custom: registry Setting

Rule Name: domain_name_check

Registry Subkey:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters

Name: Domain

TypeSmiley Frustratedtring

Value:abc.com ( type in the domain name you want to check)

3- The netbios name for domain should be ABC

Add Custom: Netbios

Rule Name:Netbios_check

NetBIOS Names:ABC

Select the <<required>> radio button

4- Skype/Bit torrent software should not be installed

Add Custom: Process

Rule NameSmiley Frustratedkype_Deny_Check

Proess NameSmiley Frustratedkype.exe /*The actuall exe file name*/

Select the <<Deny>> radio button

Md5 Checksum (optional): You can use md5 calculator and generate the checksum /* the checksum will vary for different skype version so better not to use in this case */

regards

LPW

View solution in original post

aeroplane_
Regular Contributor

Re: IC host checker policy for USB, DOMAIN check etc

Thanks dear

Can you please also suggest:

1- USB enable/disable check?

2- Is there any way to ensure by IC that enperise allowed standard softwares are installed on PC or not with some registry check etc? Because it would be very difficult to check software using the process rule on IC.

Thanks

Winston_
Occasional Contributor

Re: IC host checker policy for USB, DOMAIN check etc

Hi,

As of UAC 4.0 there is no option to check for standard list of software. and you know that the standard list of software varies for different organization.

I dont see any road map or requirement for the same. As of now you can check only through process

with regard to USB we can do check whether it is enabled or disabled.

Check the following registry settings "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor\Start"

The value for start = 4 , then usb is disabled and any other value indiacates usb is enabled.

regards

LPW

aeroplane_
Regular Contributor

Re: IC host checker policy for USB, DOMAIN check etc

Thanks you very much