Symantec Management Platform (Notification Server)

 View Only
  • 1.  Detection Rule based on Date in Registry

    Posted Jun 27, 2013 03:49 PM

    Detection/Applicability Rule question

     

    I am trying to create a rule that would compare a date in the registry yyyy/mm/dd against todays date to determine the date difference between the two.  I am trying implement a policy for the McAfee AV software to be able to force a computer to run the McUpdate.exe application if the AVDATDate in the registry is older the x days old.  So I basicall want to create a rule that would or wouldn't run the executable if the DAT file was within the specific date range.  I know that McAfee should be handling this, but we have some computers that are problem systems to get them to update their DAT files so I would like to create this policy in the SMP to handle it. 

     

    Thanks for your help



  • 2.  RE: Detection Rule based on Date in Registry

    Posted Jun 28, 2013 02:28 AM

    There is no detection rule "type" what I know of that would suite your needs.

    But what you could do is; create a script (batch/vbscript...) that would execute McUpdate.exe if the x days has passed. Use Custom (instead of Install or Uninstall) command type as it does not reflect on Detection rule.

    You could also just add a task to the policy instead of a Software (release).

    Hope that makes sense