Analysis | Power Management Audit

WOL NIC Settings?

Period 1 day

* Results in a true/false

if(not exists keys whose(exists value whose(name of it contains "WakeOnMagicPacket" AND it as string as integer != 1) of keys of it OR exists value whose(name of it contains "WakeOnPattern" AND it as string as integer != 1) of keys of it OR exists value "EnablePME" whose(it as string as integer != 1) of keys of it) of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class" of native registry) then "Enabled" else "Disabled"

WakeOnLanForwarding?

Period 6 hours

* Results in a "string"/number

if exists settings whose(name of it = "_BESClient_Comm_WakeOnLanForwardingEnable" and value of it = "1" ) of client then "Enabled" else "Disabled"

Hibernation?

Period 12 hours

* Results in a true/false

if
(
    name of operating system = "Mac OS X"
)
then "N/A" else
(
    if
    (
        major version of operating system = 6
    )
    then
    (
        if
        (
            NOT exists file "hiberfil.sys" of root folder of drive of system folder
        )
        then "Disabled" else
        (
            if
            (
                exist key
                (
                    "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes\" &
                    (
                        value "ActivePowerScheme" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of registry as string
                    )
                    & "\238C9FA8-0AAD-41ED-83F4-97BE242C8F20\9d7815a6-7ee4-497e-8888-515a05f02364"
                )
                whose
                (
                    value "ACSettingIndex" of it != ""
                )
                of registry
            )
            then
            (
                (
                    if
                    (
                        it as time interval = 0 * second
                    )
                    then "Never" else
                    (
                        preceding text of last ":" of it
                    )
                )
                of
                (
                    (
                        (
                            value "ACSettingIndex" of key
                            (
                                "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes\" &
                                (
                                    value "ActivePowerScheme" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of registry as string
                                )
                                & "\238C9FA8-0AAD-41ED-83F4-97BE242C8F20\9d7815a6-7ee4-497e-8888-515a05f02364"
                            )
                            of registry as integer
                        )
                        * second
                    )
                    as string
                )
            )
            else if
            (
                (
                    exists key
                    (
                        "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\PowerSettings\238C9FA8-0AAD-41ED-83F4-97BE242C8F20\9d7815a6-7ee4-497e-8888-515a05f02364\DefaultPowerSchemeValues\" &
                        (
                            value "ActivePowerScheme" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of registry as string
                        )
                    )
                    whose
                    (
                        value "ACSettingIndex" of it != ""
                    )
                    of registry
                )
            )
            then
            (
                (
                    if
                    (
                        it as time interval = 0 * second
                    )
                    then "Never" else
                    (
                        preceding text of last ":" of it
                    )
                )
                of
                (
                    (
                        (
                            value "ACSettingIndex" of key
                            (
                                "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\PowerSettings\238C9FA8-0AAD-41ED-83F4-97BE242C8F20\9d7815a6-7ee4-497e-8888-515a05f02364\DefaultPowerSchemeValues\" &
                                (
                                    value "ActivePowerScheme" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of registry as string
                                )
                            )
                            of registry as integer
                        )
                        * second
                    )
                    as string
                )
            )
            else "Disabled"
        )
    )
    else
    (
        (
            if
            (
                NOT exists file "hiberfil.sys" of root folder of drive of system folder OR item 5 of it = "00"
            )
            then "Disabled" else if
            (
                item 4 of it = "02"
            )
            then
            (
                (
                    if
                    (
                        item 0 of it = 0
                    )
                    then "Never" else preceding text of last ":" of
                    (
                        (
                            (
                                item 0 of it + item 1 of it
                            )
                            * second
                        )
                        as string
                    )
                )
                of
                (
                    hexadecimal integer
                    (
                        item 2 of it & item 3 of it
                    )
                    ,
                    (
                        hexadecimal integer
                        (
                            item 0 of it & item 1 of it
                        )
                    )
                )
            )
            else if
            (
                item 4 of it = "03"
            )
            then
            (
                (
                    if it = 0 then "Never" else preceding text of last ":" of
                    (
                        (
                            it * second
                        )
                        as string
                    )
                )
                of
                (
                    hexadecimal integer
                    (
                        item 0 of it & item 1 of it
                    )
                )
            )
            else
            (
                "Never"
            )
        )
        of
        (
            (
                last 2 of first 124 of
                (
                    value "AcPolicy" of it as string
                )
            )
            ,
            (
                last 2 of first 122 of
                (
                    value "AcPolicy" of it as string
                )
            )
            ,
            (
                last 2 of first 180 of
                (
                    value "AcPolicy" of it as string
                )
            )
            ,
            (
                last 2 of first 178 of
                (
                    value "AcPolicy" of it as string
                )
            )
            ,
            (
                last 2 of first 98 of
                (
                    value "AcPolicy" of it as string
                )
            )
            ,
            (
                if
                (
                    exists value "Heuristics" of it
                )
                then
                (
                    last 2 of first 14 of
                    (
                        value "Heuristics" of it as string
                    )
                )
                else
                (
                    "00"
                )
            )
        )
        of
        (
            key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Power" of registry
        )
    )
)

if (name of operating system = "Mac OS X") then "N/A" else ( if (major version of operating system = 6) then (if (NOT exists file "hiberfil.sys" of root folder of drive of system folder) then "Disabled" else (if (exist key ("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes\" & (value "ActivePowerScheme" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of registry as string) & "\238C9FA8-0AAD-41ED-83F4-97BE242C8F20\9d7815a6-7ee4-497e-8888-515a05f02364") whose (value "ACSettingIndex" of it != "") of registry) then ((if (it as time interval = 0 * second) then "Never" else (preceding text of last ":" of it)) of (((value "ACSettingIndex" of key ("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes\" & (value "ActivePowerScheme" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of registry as string) & "\238C9FA8-0AAD-41ED-83F4-97BE242C8F20\9d7815a6-7ee4-497e-8888-515a05f02364") of registry as integer) * second) as string)) else if ((exists key ("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\PowerSettings\238C9FA8-0AAD-41ED-83F4-97BE242C8F20\9d7815a6-7ee4-497e-8888-515a05f02364\DefaultPowerSchemeValues\" & (value "ActivePowerScheme" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of registry as string)) whose (value "ACSettingIndex" of it != "") of registry)) then ((if (it as time interval = 0 * second) then "Never" else (preceding text of last ":" of it)) of (((value "ACSettingIndex" of key ("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\PowerSettings\238C9FA8-0AAD-41ED-83F4-97BE242C8F20\9d7815a6-7ee4-497e-8888-515a05f02364\DefaultPowerSchemeValues\" & (value "ActivePowerScheme" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of registry as string)) of registry as integer) * second) as string)) else "Disabled")) else ((if (NOT exists file "hiberfil.sys" of root folder of drive of system folder OR item 5 of it = "00") then "Disabled" else if (item 4 of it = "02") then ((if (item 0 of it = 0) then "Never" else preceding text of last ":" of (((item 0 of it + item 1 of it) * second) as string)) of (hexadecimal integer (item 2 of it & item 3 of it) , (hexadecimal integer (item 0 of it & item 1 of it)))) else if (item 4 of it = "03") then ((if it = 0 then "Never" else preceding text of last ":" of ((it * second) as string)) of (hexadecimal integer (item 0 of it & item 1 of it))) else ("Never")) of ((last 2 of first 124 of (value "AcPolicy" of it as string)) , (last 2 of first 122 of (value "AcPolicy" of it as string)) , (last 2 of first 180 of (value "AcPolicy" of it as string)) , (last 2 of first 178 of (value "AcPolicy" of it as string)) , (last 2 of first 98 of (value "AcPolicy" of it as string)) , (if (exists value "Heuristics" of it) then (last 2 of first 14 of (value "Heuristics" of it as string)) else ("00"))) of (key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Power" of registry)))

MinDefaultPCNarcSetting

Period 12 hours

* Results in a true/false

minimum of (it as string as integer) of values "AcSettingIndex" of keys whose(exists values "AcSettingIndex" of it) of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\PowerSettings\238C9FA8-0AAD-41ED-83F4-97BE242C8F20\7bc4a2f9-d8fc-4469-b07b-33eb785aaca0\DefaultPowerSchemeValues" of native registry

MinPowerProfilePCNarcSetting

Period 12 hours

* Results in a true/false

if(not (exists keys whose(exists keys "238c9fa8-0aad-41ed-83f4-97be242c8f20\7bc4a2f9-d8fc-4469-b07b-33eb785aaca0" of it) of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of native registry AND exists values "AcSettingIndex" of keys "238c9fa8-0aad-41ed-83f4-97be242c8f20\7bc4a2f9-d8fc-4469-b07b-33eb785aaca0" of keys whose(exists keys "238c9fa8-0aad-41ed-83f4-97be242c8f20\7bc4a2f9-d8fc-4469-b07b-33eb785aaca0" of it) of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of native registry)) then ERROR "not set" else (minimum of (it as string as integer) of values "AcSettingIndex" of keys "238c9fa8-0aad-41ed-83f4-97be242c8f20\7bc4a2f9-d8fc-4469-b07b-33eb785aaca0" of keys whose(exists keys "238c9fa8-0aad-41ed-83f4-97be242c8f20\7bc4a2f9-d8fc-4469-b07b-33eb785aaca0" of it) of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of native registry)

MaxPowerProfilePCNarcSetting

Period 12 hours

* Results in a true/false

if(not (exists keys whose(exists keys "238c9fa8-0aad-41ed-83f4-97be242c8f20\7bc4a2f9-d8fc-4469-b07b-33eb785aaca0" of it) of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of native registry AND exists values "AcSettingIndex" of keys "238c9fa8-0aad-41ed-83f4-97be242c8f20\7bc4a2f9-d8fc-4469-b07b-33eb785aaca0" of keys whose(exists keys "238c9fa8-0aad-41ed-83f4-97be242c8f20\7bc4a2f9-d8fc-4469-b07b-33eb785aaca0" of it) of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of native registry)) then ERROR "not set" else (maximum of (it as string as integer) of values "AcSettingIndex" of keys "238c9fa8-0aad-41ed-83f4-97be242c8f20\7bc4a2f9-d8fc-4469-b07b-33eb785aaca0" of keys whose(exists keys "238c9fa8-0aad-41ed-83f4-97be242c8f20\7bc4a2f9-d8fc-4469-b07b-33eb785aaca0" of it) of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of native registry)

PCNarcSetting CurrentPowerProfile

Period 12 hours

* Results in a true/false

value "ACSettingIndex" of key "238c9fa8-0aad-41ed-83f4-97be242c8f20\7bc4a2f9-d8fc-4469-b07b-33eb785aaca0" of key (value "ActivePowerScheme" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of registry as string) of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of native registry

AllowWakeTimers CurrentPowerProfile

Period 12 hours

* Results in a true/false

value "ACSettingIndex" of key "238c9fa8-0aad-41ed-83f4-97be242c8f20\bd3b718a-0680-4d9d-8ab2-e1d2b4ac806d" of key (value "ActivePowerScheme" of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of registry as string) of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\User\PowerSchemes" of native registry

AllowWakeTimers Defaults

Period 12 hours

* Results in a true/false

if(not exists keys whose( 1 != value "AcSettingIndex" of it) of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\PowerSettings\238C9FA8-0AAD-41ED-83F4-97BE242C8F20\BD3B718A-0680-4D9D-8AB2-E1D2B4AC806D\DefaultPowerSchemeValues" of native registry) then "Enabled" else ((number of keys whose( 1 != value "AcSettingIndex" of it) of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\PowerSettings\238C9FA8-0AAD-41ED-83F4-97BE242C8F20\BD3B718A-0680-4D9D-8AB2-E1D2B4AC806D\DefaultPowerSchemeValues" of native registry) as string &" Disabled")

Search for:	Relevance	Fixlets/Tasks
	Analyses	BFI Signatures
	Dashboard/Wizard

Title	Keywords	Description
Relevance	Domain	ActionScript
Mime	Signature Content	(clear all)

ID	86
Title	Power Management Audit
Domain	BESC
Keywords	CurrentPowerProfile AllowWakeTimers Power Management Audit
Added by	jgstew on 3/19/2013 1:10:31 PM
Last Modified by	jgstew on 3/19/2013 1:10:31 PM
Counters	5402 Views / 32 Downloads
User Rating	* Average over 0 ratings. ** Log In or Register to add your rating.


Content Search Share Learn Projects	Utilities View SCM Scripts Base64 Converter Shell to Action Script	About About Us Tour FAQ Terms Contact Us	BigFix Resources Download BigFix Support Forum Github/Bigfix

Power Management Audit
Log In or Register to download the BES file, and more.

Description

Property Details

Properties

Relevance

Sharing

Comments

Content

Utilities

About

BigFix Resources

	jgstew - 3/19/2013 1:11:55 PM
	I created this analysis to enumerate many different properties that can effect a system's ability to wake from standby or wake on LAN, or other power management properties.

Power Management Audit Log In or Register to download the BES file, and more.

Description

Property Details

Properties

Relevance

Sharing

Comments

Content

Utilities

About

BigFix Resources

Power Management Audit
Log In or Register to download the BES file, and more.