Video Screencast Help

HI Policy able to Define a variable in user context

Created: 13 Mar 2012 • Updated: 20 Mar 2012 | 3 comments
Mark Goldspink's picture
0 Agree
0 Disagree
0 0 Votes
Login to vote
Status: Alternative Solution

We have recently had a massive case open in regards to the HI policy within SNAC not being able to understand what a mapped drive is Case 416-077-920.

If you ask HI to look at a certain location eg, G:\SNAC.txt SNAC will not understand the drive letter and try find a file located here \SNAC.txt

I need SNAC to be able to define a variable that is in the user context eg, mapped drive so I can then tell it if there are mapped drive dont run the login script again.

I am also sure there are many other variables that could be used under the user context.

Comments 3 CommentsJump to latest comment

Elisha's picture

This can be done by using a custom HI script and checking the HKEY_USERS registry keys for the environment variable.  Attached is a sample Host Integrity policy.  Simply unzip it and import itinto SEPM to view it.

Note: this script will get the user environment variable called "SNAC" and check for a file located here:

%SNAC%\SNAC.txt

AttachmentSize
Define a variable in user context.zip 2.51 KB
0
Login to vote
Mark Goldspink's picture

Hi Elisha,

We did try out your script (see attached) but we are having issues with it. We modified it a little and took out the last bit as not sure exaclty what that was trying to achieve.

The issue we are getting is that when run manually on the machine it works fine we get a 'True' return in the registry but when SNAC trys to run it we get a 'False' in the registry. Not sure if you can help us out further or not.

AttachmentSize
Copy of NPH Wireless Proxy.zip 3.62 KB
0
Login to vote
Elisha's picture

Here is the updated policy.  This is the policy I already sent you offline.

AttachmentSize
Copy of NPH Wireless Proxy.zip 3.37 KB
+1
Login to vote