Operating System Information (Windows) - Expanded
Log In or Register to download the BES file, and more.

5 Votes

Versioning - This is the latest version.

1Operating System Information (Windows)1/22/2014 1:30:18 PM
2Operating System Information (Windows) - Expanded1/28/2014 10:38:19 AM
3Operating System Information (Windows) - Expanded5/13/2015 7:58:32 AM

Description

http://support.bigfix.com/inspectors/System%20Objects_Win.html#operating%20system

This analysis contains information about the Microsoft Windows operating system on BES Client computers. This is an expanded version of the analysis provided by IBM.

Since this information does not change much and its evaluation can be resource intensive, most of these properties are only evaluated once per day.

After activating this analysis, you will see the following properties:

  • Full OS Name and Service Pack Level
  • OS Architecture
  • OS Version Number
  • OS Type
  • Product ID
  • Product Key (Win95, Win98, WinME only)
  • Installation Date
  • Uptime (days) [BES Clients >= 5.1]
  • OS Language (Language of the installed OS)
  • System Language  
  • User Language (Default)

Note: Many of these properties access the Windows Management Interface (WMI) to obtain the hardware properties. The WMI is not usually available on Win9x and WinNT computers so some properties may report back "N/A" on those operating systems.

Note: Some computers may have broken WMI libraries. Inconsistent results and undesired side effects may occur when the BES Client evaluates a WMI query. If you have known problems with WMI in your environment, do not activate this analysis.

 

Latest version of this analysis is found here: http://bigfix.me/analysis/details/2994629

Property Details

ID2994800
StatusAlpha - Code that was just developed
TitleOperating System Information (Windows) - Expanded
DomainBESC
Added by on 5/13/2015 7:58:32 AM
Last Modified by on 5/13/2015 7:58:32 AM
Counters 29575 Views / 240 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 4 ratings. ** Log In or Register to add your rating.

Properties

Full Operating System Name and Service Pack Level - Windows
Period 1 day
 
  * Results in a true/false
Show indented relevance
if (exists wmi AND (not (name of operating system = "WinME" ))) then (string value of selects "caption from win32_operatingsystem" of wmi & " " & csd version of operating system) else ( "Windows " & (following text of first "Win" of (name of operating system as string)) & (if (name of operating system = "WinNT" ) then ((if (exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions" whose (exists value "ProductType" of it AND (value "ProductType" of it as string as lowercase = "servernt" OR value "ProductType" of it as string as lowercase = "lanmannt" )) of registry) then (if (exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions" whose (exists value "ProductSuite" of it AND value "ProductSuite" of it as string as lowercase contains "terminal" ) of registry) then " Terminal Server" else " Server" ) else " Workstation" ) & " " & csd version of operating system) else (if (name of operating system = "Win98" ) then (if (csd version of operating system as string contains "A" ) then " Second Edition" else "" ) else (if (name of operating system = "Win95" ) then (if (csd version of operating system as string contains "C" OR csd version of operating system as string contains "B" ) then " OSR2" else "" ) else " " & csd version of operating system ))))
OS Architecture - Windows
Period 1 day
 
  * Results in a true/false
Show indented relevance
if (ia64 of operating system) then "Itanium 64-bit" else (if (x64 of operating system) then "64-bit" else "32-bit")
OS Version Number - Windows
Period 1 day
 
  * Results in a true/false
Show indented relevance
version of operating system
OS Type - Windows
Period 1 day
 
  * Results in a true/false
Show indented relevance
if (name of operating system as lowercase starts with "win") then (if (name of operating system = "Win95" OR name of operating system = "Win98" or name of operating system = "WinME") then "Workstation" else (if (value "ProductType" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions" of registry = "WinNT") then "Workstation" else "Server")) else "Unknown - " & name of operating system
OS Product ID - Windows
Period 1 day
 
  * Results in a true/false
Show indented relevance
(if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion" whose (exists value "ProductId" of it) of native registry AND NOT (name of operating system = "WinNT")) then (value "ProductId" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion" of native registry as string) else (if (exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" whose (exists value "ProductId" of it) of native registry) then (value "ProductId" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" of native registry as string) else "Unknown"))
OS Product Key - Windows
Period 1 day
 
  * Results in a true/false
Show indented relevance
if (name of operating system = "Win95" AND exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion" whose (exists value "ProductId" of it) of registry) then (value "ProductId" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion" of registry as string) else (if ((name of operating system = "Win98" OR name of operating system = "WinME") AND exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion" whose (exists value "ProductKey" of it) of registry) then (value "ProductKey" of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion" of registry as string) else ("Unknown"))
OS Installation Date - Windows (WMI)
Period 1 day
 
  * Results in a true/false
Show indented relevance
if (exists wmi AND exists selects "InstallDate from win32_operatingsystem" of wmi AND not ((string value of selects "InstallDate from win32_operatingsystem" of wmi) = "")) then ((first 4 of (first 8 of string value of (selects "InstallDate from Win32_OperatingSystem" of wmi))) & "-" & (first 2 of (last 4 of (first 8 of string value of (selects "InstallDate from Win32_OperatingSystem" of wmi)))) & "-" & (last 2 of (first 8 of string value of (selects "InstallDate from Win32_OperatingSystem" of wmi)))) else ("N/A")
Uptime - Windows
Period 1 hour
 
  * Results in a true/false
Show indented relevance
(if it = 1 then it as string & " day" else it as string & " days") of ((uptime of operating system) / day)
OS Language - Windows
Period 2 days
 
  * Results in a true/false
Show indented relevance
language of version block of file "kernel32.dll" of system folder & (if (exists key "HKLM\System\CurrentControlSet\Control\Nls\MUILanguages" of registry AND exists value of key "HKLM\System\CurrentControlSet\Control\Nls\MUILanguages" of registry) then " | MUI Installed" else "")
System Language - Windows
Period 2 days
 
  * Results in a true/false
Show indented relevance
system language
User Language - Windows
Period 2 days
 
  * Results in a true/false
Show indented relevance
user language
ProgramFiles EnvVar
Period 2 days
 
  * Results in a true/false
Show indented relevance
value of variable "ProgramFiles" of environment
OS Architecture - Inspector
Period 2 days
 
  * Results in a true/false
Show indented relevance
architecture of operating system
Boot Time
Period 1 hour
 
  * Results in a true/false
Show indented relevance
boot time of operating system
product info string
Period 2 days
 
  * Results in a true/false
Show indented relevance
if(version of operating system >= "6.0") then (product info string of operating system) else NOTHING
platform id
Period 2 days
 
  * Results in a true/false
Show indented relevance
platform id of operating system
product type
Period 2 days
 
  * Results in a true/false
Show indented relevance
(if (it = nt workstation product type) then "Workstation" else if (it = nt server product type) then "Server" else if (it = nt domain controller product type) then "DomainController" else "Unknown") of (product type of operating system)
performance counter frequency
Period 12 hours
 
  * Results in a true/false
Show indented relevance
performance counter frequency of operating system
performance counter
Period 1 hour
 
  * Results in a true/false
Show indented relevance
performance counter of operating system
ProductName
Period 12 hours
 
  * Results in a true/false
Show indented relevance
unique values of (it as string as trimmed string) of values "ProductName" of keys "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion" of (x32 registries;x64 registries)

Relevance

Used in 257 fixlets and 9 analyses   * Results in a true/false
Show indented relevance
name of operating system as lowercase starts with "win"
Used in 9 analyses   * Results in a true/false
Show indented relevance
(if (name of operating system starts with "Win") then platform id of operating system != 3 else true) AND (if exists property "in proxy agent context" then (not in proxy agent context) else true) AND (if exists property "android" of type "operating system" then (not android of operating system) else true)
Used in 8 analyses   * Results in a true/false
Show indented relevance
version of client >= "5.0"

Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!