Search | bigfix.me

Search Results for: computer member of ad security group

Results - 779 Relevance Statements, 7456 Fixlets, 75 Analyses, 3 Dashboards, and 10 Signatures -- (8113.0681 ms)

Page 333 of 333 << < Prev Next > >>

Relevance 319

* Results in a "string"/number

if ( exists (computer name) whose (it as string as lowercase contains "nts700") ) AND ( exists drive "D:" ) then free space of drive "D:" as string else if ( (exists (computer name) whose (it as string as lowercase contains "saps01" OR it as string as lowercase contains "saps02")) ) AND ( exists drive "F:" ) then free space of drive "F:" as string else "N/A"

0 Votes

Relevance 320

* Results in a "string"/number

if
(
    exists
    (
        computer name
    )
    whose
    (
        it as string as lowercase contains "nts700"
    )
)
AND
(
    exists drive "D:"
)
then if
(
    (
        (
            (
                (
                    total space of drive "D:"
                )
                /
                (
                    1024 * 1024
                )
            )
            /10
        )
        +2048
    )
    <
    (
        free space of drive "D:" /1024/1024
    )
)
then "Move" else "Ticket" else if
(
    (
        exists
        (
            computer name
        )
        whose
        (
            it as string as lowercase contains "saps01" OR it as string as lowercase contains "saps02"
        )
    )
)
AND
(
    exists drive "F:"
)
then if
(
    (
        (
            (
                (
                    total space of drive "F:"
                )
                /
                (
                    1024 * 1024
                )
            )
            /10
        )
        +2048
    )
    <
    (
        free space of drive "F:" /1024/1024
    )
)
then "Move" else "Ticket" else "Ticket"

0 Votes

Relevance 376

* Results in a "string"/number

if ( exists (computer name) whose (it as string as lowercase contains "nts700") ) AND ( exists drive "D:" ) then "D:" else if ( (exists (computer name) whose (it as string as lowercase contains "saps01" OR it as string as lowercase contains "saps02")) ) AND ( exists drive "F:" ) then "F:" else "No Drive Available"

0 Votes

Relevance 377

* Results in a "string"/number

if ( exists (computer name) whose (it as string as lowercase contains "nts700") ) AND ( exists drive "D:" ) then total space of drive "D:" as string else if ( (exists (computer name) whose (it as string as lowercase contains "saps01" OR it as string as lowercase contains "saps02")) ) AND ( exists drive "F:" ) then total space of drive "F:" as string else "N/A"

0 Votes

Relevance 378

* Results in a "string"/number

0 Votes

Relevance 379

* Results in a "string"/number

0 Votes

Relevance 415

Used in 16 fixlets

* Results in a true/false

exists site whose (name of it = "Enterprise Security" OR name of it = "SecureInfo EVR" OR name of it = "SANS Top Vulnerabilities to Windows Systems" OR name of it = "eEye Remediation Manager" OR name of it as string starts with "Patches for Windows ")

0 Votes

Relevance 582

Used in 1 fixlet

* Results in a true/false

NOT
(
    (
        version of regapp "iexplore.exe" >= "7"
    )
    AND
    (
        exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60" of registry
    )
    AND
    (
        exists folder "macromed\flash" whose
        (
            exists file whose
            (
                (
                    (
                        it starts with "flash" AND it ends with ".ocx"
                    )
                    OR
                    (
                        it = "swflash.ocx"
                    )
                )
                of
                (
                    name of it as lowercase
                )
                AND version of it >= "9"
            )
            of it
        )
        of system folder
    )
    AND
    (
        exists key
        (
            "HKEY_USERS\" &
            (
                (
                    if it = "LocalSystem" then "S-1-5-18" else if it = "LocalService" then "S-1-5-19" else if it = "NetworkService" then "S-1-5-20" else
                    (
                        string value of select
                        (
                            (
                                "SID from Win32_UserAccount where NAME='" & following text of last "\" of it & "' and DOMAIN='" &
                                (
                                    (
                                        if it = "." then computer name else it
                                    )
                                    of preceding text of last "\" of it
                                )
                                & "'"
                            )
                            of
                            (
                                (
                                    login account of service "BESWebReportsServer"
                                )
                                as string
                            )
                        )
                        of wmi
                    )
                )
                of login account of service "BESWebReportsServer"
            )
            & "\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\" &
            (
                first match
                (
                    regex "^[^:]+"
                )
                of first match
                (
                    regex "[^/]+$"
                )
                of
                (
                    it as string
                )
            )
            of value "Hostname" of key "HKLM\SOFTWARE\BigFix\Enterprise Server\Installer\" of registry
        )
        whose
        (
            exists value "http" whose
            (
                it = 2
            )
            of it AND exists value "https" whose
            (
                it = 2
            )
            of it
        )
        of registry
    )
    AND
    (
        exists key "HKLM\Software\BigFix\Enterprise Server\BESReports" whose
        (
            (
                (
                    exists value "PDFEnable" whose
                    (
                        it = "1"
                    )
                    of it
                )
                OR
                (
                    exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports" whose
                    (
                        exists value
                        (
                            (
                                (
                                    (
                                        if x64 of operating system then value "ProgramFilesDir (x86)" of it else value "ProgramFilesDir" of it
                                    )
                                    of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion" of registry
                                )
                                as string
                            )
                            & "\BigFix Enterprise\BES Server\BESReportsData\ArchiveData\__pdf\out.ps"
                        )
                        of it
                    )
                    of native registry
                )
            )
            AND value "PDFPostScriptPath" of it =
            (
                (
                    (
                        (
                            if x64 of operating system then value "ProgramFilesDir (x86)" of it else value "ProgramFilesDir" of it
                        )
                        of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion" of registry
                    )
                    as string
                )
                & "\BigFix Enterprise\BES Server\BESReportsData\ArchiveData\__pdf\out.ps"
            )
            AND value "PDFPrinterName" of it = "BES Web Reports Printer"
        )
        of registry
    )
    AND
    (
        exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" whose
        (
            (
                exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60" whose
                (
                    exists value "UninstallString" of it
                )
                of registry
            )
            AND
            (
                (
                    it contains parenthesized part 1 of
                    (
                        first match
                        (
                            regex "^(.*)uninstgs.exe"
                        )
                        of
                        (
                            value "UninstallString" of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60" of registry as string
                        )
                    )
                    & "gs8.60\bin" AND it contains parenthesized part 1 of
                    (
                        first match
                        (
                            regex "^(.*)uninstgs.exe"
                        )
                        of
                        (
                            value "UninstallString" of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60" of registry as string
                        )
                    )
                    & "gs8.60\lib"
                )
                of
                (
                    value "Path" of it as string
                )
            )
        )
        of registry
    )
    AND
    (
        exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports" whose
        (
            exists value
            (
                (
                    (
                        (
                            if x64 of operating system then value "ProgramFilesDir (x86)" of it else value "ProgramFilesDir" of it
                        )
                        of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion" of registry
                    )
                    as string
                )
                & "\BigFix Enterprise\BES Server\BESReportsData\ArchiveData\__pdf\out.ps"
            )
            of it
        )
        of native registry
    )
    AND
    (
        exists key
        (
            "HKU\" &
            (
                (
                    if it = "LocalSystem" then "S-1-5-18" else if it = "LocalService" then "S-1-5-19" else if it = "NetworkService" then "S-1-5-20" else
                    (
                        string value of select
                        (
                            (
                                "SID from Win32_UserAccount where NAME='" & following text of last "\" of it & "' and DOMAIN='" &
                                (
                                    (
                                        if it = "." then computer name else it
                                    )
                                    of preceding text of last "\" of it
                                )
                                & "'"
                            )
                            of
                            (
                                (
                                    login account of service "BESWebReportsServer"
                                )
                                as string
                            )
                        )
                        of wmi
                    )
                )
                of login account of service "BESWebReportsServer"
            )
            & "\Software\Microsoft\Internet Explorer\PageSetup"
        )
        of registry
    )
)

0 Votes

Relevance 590

Used in 1 fixlet

* Results in a true/false

(exists file ((preceding text of last "/" of (client folder of current site as string)) & "/ClientDiagnostics_" & computer name & ".tar.gz")) or (exists file ((preceding text of last "/BESClient" of (client folder of current site as string)) & "/ClientDiagnostics_" & computer name & ".tar.gz")) or (exists file ((preceding text of last "/" of (client folder of current site as string)) & "/__Global/Archive/Last/client_0_ClientDiagnostics_" & computer name & ".tar.gz")) or (exists file ((preceding text of last "/" of (client folder of current site as string)) & "/__Global/Archive/Last/client_1_ClientDiagnostics_" & computer name & ".tar.gz"))

0 Votes

Relevance 620

Used in 1 fixlet

* Results in a true/false

exists key whose (value "ProductName" of it = "BigFix Enterprise Client" OR value "ProductName" of it = "Tivoli Endpoint Manager Client" OR value "ProductName" of it = "Trend Micro Endpoint Security Platform") of keys "HKEY_CLASSES_ROOT\Installer\Products" of native registry

0 Votes

Relevance 822

Used in 1 fixlet

* Results in a true/false

NOT
(
    (
        version of regapp "iexplore.exe" >= "7"
    )
    AND
    (
        exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60" of registry
    )
    AND
    (
        exists folder "macromed\flash" whose
        (
            exists file whose
            (
                (
                    (
                        it starts with "flash" AND it ends with ".ocx"
                    )
                    OR
                    (
                        it = "swflash.ocx"
                    )
                )
                of
                (
                    name of it as lowercase
                )
                AND version of it >= "9"
            )
            of it
        )
        of system folder
    )
    AND
    (
        exists key
        (
            "HKEY_USERS\" &
            (
                (
                    if it = "LocalSystem" then "S-1-5-18" else if it = "LocalService" then "S-1-5-19" else if it = "NetworkService" then "S-1-5-20" else
                    (
                        string value of select
                        (
                            (
                                "SID from Win32_UserAccount where NAME='" & following text of last "\" of it & "' and DOMAIN='" &
                                (
                                    (
                                        if it = "." then computer name else it
                                    )
                                    of preceding text of last "\" of it
                                )
                                & "'"
                            )
                            of
                            (
                                (
                                    login account of service "BESWebReportsServer"
                                )
                                as string
                            )
                        )
                        of wmi
                    )
                )
                of login account of service "BESWebReportsServer"
            )
            & "\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\" &
            (
                first match
                (
                    regex "^[^:]+"
                )
                of first match
                (
                    regex "[^/]+$"
                )
                of
                (
                    it as string
                )
            )
            of value "Hostname" of key "HKLM\SOFTWARE\BigFix\Enterprise Server\Installer\" of registry
        )
        whose
        (
            exists value "http" whose
            (
                it = 2
            )
            of it AND exists value "https" whose
            (
                it = 2
            )
            of it
        )
        of registry
    )
    AND
    (
        exists key "HKLM\Software\BigFix\Enterprise Server\BESReports" whose
        (
            (
                (
                    exists value "PDFEnable" whose
                    (
                        it = "1"
                    )
                    of it
                )
                OR
                (
                    exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports" whose
                    (
                        exists value
                        (
                            (
                                (
                                    value "EnterpriseServerFolder" of key "HKLM\SOFTWARE\BigFix\Enterprise Server" of x32 registry
                                )
                                as string
                            )
                            & "BESReportsData\ArchiveData\__pdf\out.ps"
                        )
                        of it
                    )
                    of native registry
                )
            )
            AND value "PDFPostScriptPath" of it =
            (
                (
                    (
                        value "EnterpriseServerFolder" of key "HKLM\SOFTWARE\BigFix\Enterprise Server" of x32 registry
                    )
                    as string
                )
                & "BESReportsData\ArchiveData\__pdf\out.ps"
            )
            AND value "PDFPrinterName" of it = "BES Web Reports Printer"
        )
        of registry
    )
    AND
    (
        exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" whose
        (
            (
                exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60" whose
                (
                    exists value "UninstallString" of it
                )
                of registry
            )
            AND
            (
                (
                    it contains parenthesized part 1 of
                    (
                        first match
                        (
                            regex "^(.*)uninstgs.exe"
                        )
                        of
                        (
                            value "UninstallString" of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60" of registry as string
                        )
                    )
                    & "gs8.60\bin" AND it contains parenthesized part 1 of
                    (
                        first match
                        (
                            regex "^(.*)uninstgs.exe"
                        )
                        of
                        (
                            value "UninstallString" of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60" of registry as string
                        )
                    )
                    & "gs8.60\lib"
                )
                of
                (
                    value "Path" of it as string
                )
            )
        )
        of registry
    )
    AND
    (
        exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports" whose
        (
            exists value
            (
                (
                    (
                        value "EnterpriseServerFolder" of key "HKLM\SOFTWARE\BigFix\Enterprise Server" of x32 registry
                    )
                    as string
                )
                & "BESReportsData\ArchiveData\__pdf\out.ps"
            )
            of it
        )
        of native registry
    )
    AND
    (
        exists key
        (
            "HKU\" &
            (
                (
                    if it = "LocalSystem" then "S-1-5-18" else if it = "LocalService" then "S-1-5-19" else if it = "NetworkService" then "S-1-5-20" else
                    (
                        string value of select
                        (
                            (
                                "SID from Win32_UserAccount where NAME='" & following text of last "\" of it & "' and DOMAIN='" &
                                (
                                    (
                                        if it = "." then computer name else it
                                    )
                                    of preceding text of last "\" of it
                                )
                                & "'"
                            )
                            of
                            (
                                (
                                    login account of service "BESWebReportsServer"
                                )
                                as string
                            )
                        )
                        of wmi
                    )
                )
                of login account of service "BESWebReportsServer"
            )
            & "\Software\Microsoft\Internet Explorer\PageSetup"
        )
        of registry
    )
)

0 Votes

Relevance 825

Used in 1 fixlet

* Results in a true/false

(
    (
        version of regapp "iexplore.exe" >= "7"
    )
    AND
    (
        exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60" of registry
    )
    AND
    (
        exists folder "macromed\flash" whose
        (
            exists file whose
            (
                (
                    (
                        it starts with "flash" AND it ends with ".ocx"
                    )
                    OR
                    (
                        it = "swflash.ocx"
                    )
                )
                of
                (
                    name of it as lowercase
                )
                AND version of it >= "9"
            )
            of it
        )
        of system folder
    )
    AND
    (
        exists key
        (
            "HKEY_USERS\" &
            (
                (
                    if
                    (
                        it = "LocalSystem"
                    )
                    then
                    (
                        "S-1-5-18"
                    )
                    else if
                    (
                        it = "LocalService"
                    )
                    then
                    (
                        "S-1-5-19"
                    )
                    else if
                    (
                        it = "NetworkService"
                    )
                    then
                    (
                        "S-1-5-20"
                    )
                    else if
                    (
                        it contains "@"
                    )
                    then
                    (
                        component string of sid of security account
                        (
                            it
                        )
                    )
                    else
                    (
                        string value of select
                        (
                            (
                                "SID from Win32_UserAccount where NAME='" & following text of last "\" of it & "' and DOMAIN='" &
                                (
                                    (
                                        if it = "." then computer name else it
                                    )
                                    of preceding text of last "\" of it
                                )
                                & "'"
                            )
                            of
                            (
                                (
                                    login account of service "BESWebReportsServer"
                                )
                                as string
                            )
                        )
                        of wmi
                    )
                )
                of login account of service "BESWebReportsServer"
            )
            & "\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\" &
            (
                first match
                (
                    regex "^[^:]+"
                )
                of first match
                (
                    regex "[^/]+$"
                )
                of
                (
                    it as string
                )
            )
            of value "Hostname" of key "HKLM\SOFTWARE\BigFix\Enterprise Server\Installer\" of registry
        )
        whose
        (
            exists value "http" whose
            (
                it = 2
            )
            of it AND exists value "https" whose
            (
                it = 2
            )
            of it
        )
        of registry
    )
    AND
    (
        exists key "HKLM\Software\BigFix\Enterprise Server\BESReports" whose
        (
            (
                (
                    exists value "PDFEnable" whose
                    (
                        it = "1"
                    )
                    of it
                )
                OR
                (
                    exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports" whose
                    (
                        exists value
                        (
                            (
                                (
                                    value "EnterpriseServerFolder" of key "HKLM\SOFTWARE\BigFix\Enterprise Server" of x32 registry
                                )
                                as string
                            )
                            & "BESReportsData\ArchiveData\__pdf\out.ps"
                        )
                        of it
                    )
                    of native registry
                )
            )
            AND value "PDFPostScriptPath" of it =
            (
                (
                    (
                        value "EnterpriseServerFolder" of key "HKLM\SOFTWARE\BigFix\Enterprise Server" of x32 registry
                    )
                    as string
                )
                & "BESReportsData\ArchiveData\__pdf\out.ps"
            )
            AND value "PDFPrinterName" of it = "BES Web Reports Printer"
        )
        of registry
    )
    AND
    (
        exists key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" whose
        (
            (
                exists key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60" whose
                (
                    exists value "UninstallString" of it
                )
                of registry
            )
            AND
            (
                (
                    it contains parenthesized part 1 of
                    (
                        first match
                        (
                            regex "^(.*)uninstgs.exe"
                        )
                        of
                        (
                            value "UninstallString" of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60" of registry as string
                        )
                    )
                    & "gs8.60\bin" AND it contains parenthesized part 1 of
                    (
                        first match
                        (
                            regex "^(.*)uninstgs.exe"
                        )
                        of
                        (
                            value "UninstallString" of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GPL Ghostscript 8.60" of registry as string
                        )
                    )
                    & "gs8.60\lib"
                )
                of
                (
                    value "Path" of it as string
                )
            )
        )
        of registry
    )
    AND
    (
        exists key "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports" whose
        (
            exists value
            (
                (
                    (
                        value "EnterpriseServerFolder" of key "HKLM\SOFTWARE\BigFix\Enterprise Server" of x32 registry
                    )
                    as string
                )
                & "BESReportsData\ArchiveData\__pdf\out.ps"
            )
            of it
        )
        of native registry
    )
    AND
    (
        exists key
        (
            "HKU\" &
            (
                (
                    if
                    (
                        it = "LocalSystem"
                    )
                    then
                    (
                        "S-1-5-18"
                    )
                    else if
                    (
                        it = "LocalService"
                    )
                    then
                    (
                        "S-1-5-19"
                    )
                    else if
                    (
                        it = "NetworkService"
                    )
                    then
                    (
                        "S-1-5-20"
                    )
                    else if
                    (
                        it contains "@"
                    )
                    then
                    (
                        component string of sid of security account
                        (
                            it
                        )
                    )
                    else
                    (
                        string value of select
                        (
                            (
                                "SID from Win32_UserAccount where NAME='" & following text of last "\" of it & "' and DOMAIN='" &
                                (
                                    (
                                        if it = "." then computer name else it
                                    )
                                    of preceding text of last "\" of it
                                )
                                & "'"
                            )
                            of
                            (
                                (
                                    login account of service "BESWebReportsServer"
                                )
                                as string
                            )
                        )
                        of wmi
                    )
                )
                of login account of service "BESWebReportsServer"
            )
            & "\Software\Microsoft\Internet Explorer\PageSetup"
        )
        of registry
    )
)

1 Votes

Relevance 893

Used in 1 fixlet

* Results in a true/false

name of operating system starts with "Win" AND (((it = "BES Client" OR it = "Enterprise Client") of name of parent folder of regapp "BESClient.exe") AND exists (values "DisplayName" of keys of key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" of registry) whose ((it = "BigFix Enterprise Client" OR it = "BigFix for IBM Proventia ESC Client" OR it = "ESP Agent" OR it = "Trend Micro Endpoint Security Platform" OR it = "Tivoli Endpoint Manager Client") of (it as string)))

0 Votes

(SECURITY), Struts2 Core Jar, 0.ANY RELEASE (Signature 113)

Uploaded on 9/13/2017 by ARZE
2 comments and 29 downloads

(SECURITY), Struts2 Core Jar, 0.NOT 2.3.34 OR 2.5.13 (Signature 114)

Uploaded on 9/15/2017 by ARZE
0 comments and 12 downloads

IBM, IBM Security Guardium Standard Activity Monitor for Databases, 10.5 (Signature 1225)

Uploaded on 3/17/2021 by ArturZ
0 comments and 8 downloads

Tyco Security Products, C-Cure, 2.0 (Signature 126)