deviceTRUST 19.2 is now available and includes the new macOS Client and an updated iOS Client. See the release notes for more information.

Policy category: Host Filter

  1. Policy setting: Query to include host ACCESS POINTS
  2. Policy setting: Query to include host CERTIFICATES
  3. Policy setting: Query to include host CUSTOM from Windows Registry
  4. Policy setting: Query to include host DISPLAYS
  5. Policy setting: Query to include host LOGICAL DISKS
  6. Policy setting: Query to include host MAPPED DRIVES
  7. Policy setting: Query to include host NETWORKS
  8. Policy setting: Query to include host PRINTERS
  9. Policy setting: Query to include host USER GROUPS
  10. Policy setting: Query to exclude host WINDOWS FIREWALL rules
  11. Policy setting: Filter host ACCESS POINT ssid, bssid, speed, quality, etc
  12. Policy setting: Filter host CERTIFICATE store, name, issuer, subject, etc
  13. Policy setting: Filter host CUSTOM path, name, value
  14. Policy setting: Filter host DEVICETRUST version number, connected
  15. Policy setting: Filter host DISPLAY capabilities
  16. Policy setting: Filter host DOMAIN, name, dns, sid, etc
  17. Policy setting: Filter host HARDWARE vendor, model, cpu, memory, bios, etc
  18. Policy setting: Filter host INPUT keyboard, mouse, pen and touch
  19. Policy setting: Filter host LOCATION latitude, longitude, address, etc
  20. Policy setting: Filter host LOGICAL DISK type, label, file system, free space, vendor, product, etc
  21. Policy setting: Filter host MAPPED DRIVE local, remote, user, etc
  22. Policy setting: Filter host NAME, id, dns, sid, etc
  23. Policy setting: Filter host NETWORK ip, mac, dns, wifi, etc
  24. Policy setting: Filter host OS name, version, etc
  25. Policy setting: Filter host PASSWORD POLICY min and max age, length, history, etc
  26. Policy setting: Filter host PERFORMANCE, including bandwidth and latency
  27. Policy setting: Filter host POWER ac, battery, scheme
  28. Policy setting: Filter host PRINTER name, share, port, driver, etc
  29. Policy setting: Filter host REGION time zone, language, locale, keyboard, etc
  30. Policy setting: Filter host REMOTE CONTROL active, protocol, remote ip, etc
  31. Policy setting: Filter host SCREEN SAVER enabled, secure, timeout and filename
  32. Policy setting: Filter host SECURITY PRODUCT antivirus, antispyware, firewall
  33. Policy setting: Filter host SESSION id, logon & connect time, etc
  34. Policy setting: Filter host SMARTCARDREADER name
  35. Policy setting: Filter host USER name, domain, local admin, auth, password age, groups, etc
  36. Policy setting: Filter host WHOIS ip, dns, isp and country
  37. Policy setting: Filter host WINDOWS windows update, uac, internet settings
  38. Policy setting: Filter host WINDOWS DEFENDER status, last scan, versions, etc
  39. Policy setting: Filter host WINDOWS FIREWALL profile settings, rules, etc
  40. Policy setting: Filter host WINDOWS UPDATE status, last install, pending updates, etc

Policy setting: Query to include host ACCESS POINTS

Defines queries which can be used to discover access points on the local host.

Access points are included within the properties if they match all of the constraints within any of the queries.

The maximum number of access points is limited to the maximum items field, or unlimited when set to zero.

Available constraints include:

  • Text constraints for SSID and BSSID.
  • Number constraints for Strength, Quality and Frequency.
  • Boolean constraint for Secure.

For example:

  • SSID=’*’ - Queries all access points.
  • SSID=’*’, Secure=’true’ - Queries all secure access points.
  • SSID=’MyNetwork-*’, Strength>=’-50’ - Queries all access points with an SSID beginning with ‘MyNetwork-‘ and with an RSSI signal strength greater than or equal to ‘-50’.

For full details, please see deviceTRUST Property Queries within the deviceTRUST Administration Guide.

The default value does not return any access points.

Policy setting: Query to include host CERTIFICATES

Defines one or more queries which can be used to find private certificates on the local host.

Certificates are included within the properties if they match all of the constraints within any of the queries.

The maximum number of certificates is limited to the maximum items field, or unlimited when set to zero.

Available constraints include:

  • Text constraints for Store, Name, Subject, Issuer, SignatureAlgorithm, SerialNumber, ThumbprintSha256, Template, ExtendedUsage, RootName and RootThumbprintSha256.
  • Enum constraint for Location with values CurrentUser and LocalMachine.
  • Enum constraint for Version with values V1, V2 and V3.
  • Enum constraint for VerificationError with values None, CannotBeVerified, Revoked, UntrustedRoot, UntrustedTestRoot, Chaining, Expired, Critical and NoRevocationCheck.
  • Enum constraint for Usage with values EncipherOnly, CrlSigning, CertificateSigning, KeyAgreement, DataEncipherment, KeyEncipherment, NonReduiation, DigitalSignature and DecipherOnly.
  • Date constraints for NotBefore and NotAfter.

For example:

  • Template=’CompanyCert’, ExtendedUsage=’1.3.6.1.5.5.7.3.2’ - All certificates assigned by a template containing the name ‘CompanyCert’ for use with client authentication.
  • VerificationError=’*’ - All certificates, regardless of their verification errors.
  • VerificationError=’None;Expired’, Issuer=’TrustedAuthority’ - All valid or expired certificates whose issuer contains the text ‘TrustedAuthority’.

For full details, please see deviceTRUST Property Queries within the deviceTRUST Administration Guide.

The default value is “Store=’My’, Location=’CurrentUser’, VerificationError=’None’”. Store defaults to ‘My’ unless specified. Location defaults to ‘CurrentUser’ unless specified. VerificationError defaults to ‘None’ unless specified.

Policy setting: Query to include host CUSTOM from Windows Registry

Defines one or more queries which can be used to include Custom properties from the Windows Registry of the local host.

Custom properties are included from the Windows Registry if they match all of the constraints within any of the queries.

Available inputs include:

  • Text input for Key and Name.
  • Enum input for Type with values REG_SZ, REG_EXPAND_SZ, REG_MULTI_SZ, REG_BINARY, REG_DWORD, REG_QWORD. When supplied, filters the values that match the type.
  • Boolean input for Redirect32. When true and the properties are read from a 32-bit process on a 64-bit platform, will redirect to the virtualized registry.
  • Boolean input for Redirect64. When true and the properties are read from a 64-bit process, will redirect to the virtualized registry.

For example:

  • Key=’HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion’, Name=’ProductId’

Both Key and Value inputs are required. On a 64-bit platform when no redirection is specified, an attempt is made to read from the native registry key before falling back to the virtualized registry key.

For full details, please see deviceTRUST Property Queries within the deviceTRUST Administration Guide.

The default value does not include any Windows Registry values.

Policy setting: Query to include host DISPLAYS

Defines queries which can be used to discover displays on the local host.

Displays are included within the properties if they match all of the constraints within any of the queries.

The maximum number of displays is limited to the maximum items field, or unlimited when set to zero.

Available constraints include:

  • Text constraint for MonitorVendor, MonitorProduct, MonitorSerialNumber, AdapterVendor, AdapterProduct.
  • Number constraints for Width, Height and Bpp.
  • Boolean constraints for MonitorExternal.

For example:

  • Width>=’1024’, Height>=’768’ - Queries all displays which have a width greater than or equal to 1024 pixels, and a height greater than or equal to 768.

For full details, please see deviceTRUST Property Queries within the deviceTRUST Administration Guide.

The default query includes all displays.

Policy setting: Query to include host LOGICAL DISKS

Defines one or more queries which can be used to find logical disks on the local host.

Logical disks are included within the properties if they match all of the constraints within any of the queries.

Available constraints include:

  • Enum constraints for Type with values Removable, Fixed, Cdrom and Ramdisk.
  • Enum constraints for Flags with values NotReady, PreservedNames, CaseSensitiveSearch, DaxVolume, SupportsCompression, NamedStreams, PersistentAcls, ReadOnly, SequentialWriteOnce, SupportsEncryption, ExtendedAttributes, HardLinks, ObjectIds, OpenByFileId, ReparsePoints, SparseFiles, Transactions, UsnJournal, UnicodeFileNames, IsCompressed, SupportsQuotas.
  • Enum constraints for BusType with values SCSI, ATAPI, ATA, IEEE1394, SSA, FibreChannel, USB, RAID, iSCSI, SAS, SATA, SecureDigital, MultimediaCard, Virtual, FileBackedVirtual, StorageSpaces and NVMe.
  • Text constraints for Label, FileSystem, Drive, Path, Name and SerialNumber.
  • Number constraints for TotalMB, FreeMb, VendorId and ProductId.

For example:

  • Drive=’D:,E:,F:,G:’ - Returns any drive mapped to letters D, E, F or G.
  • Type=’Removable’ - Returns only removable disks.

For full details, please see deviceTRUST Property Queries within the deviceTRUST Administration Guide.

The default value returns all ready logical disks represented by a path (e.g. Flags!=’NotReady’, Path!=’’).

Policy setting: Query to include host MAPPED DRIVES

Defines one or more queries which can be used to find mapped drives on the local host.

Mapped drives are included within the properties if they match all of the constraints within any of the queries.

Available constraints include:

  • Text constraints for Drive, Server, Share, User and Provider.

For example:

  • Drive=’D:’ - Returns any drives mapped to a local D:.
  • User=’DOMAIN*’ - Returns any mapped drives authenticated by a member of the ‘DOMAIN’ domain.
  • Server=’\SERVERNAME’ - Returns any mapped drives using a remote server name of ‘\SERVERNAME’.

For full details, please see deviceTRUST Property Queries within the deviceTRUST Administration Guide.

The default value returns all mapped drives.

Policy setting: Query to include host NETWORKS

Defines queries which can be used to discover networks on the local host.

Networks are included within the properties if they match all of the constraints within any of the queries.

The maximum number of networks is limited to the maximum items field, or unlimited when set to zero.

Available constraints include:

  • Text constraints for Name, Description, Mac, GatewayMac, WifiSsid, WifiBssid, WifiSecurity and DnsSuffix.
  • Enum constraint for Status with values Up, Down, Testing, Unknown, Dormant, NotPresent and LowerLayerDown.
  • Enum constraint for Type with values Other, Ethernet, PPP, ATM, WiFi, Tunnel, Firewire and Mobile.
  • Boolean constraint for DhcpEnabled.
  • Number constraints for Speed and WifiStrength.
  • IpAddress constraints for IP, Gateway, DNS, WINS and DhcpServer.

For example:

  • DhcpEnabled=’true’, DhcpServer=’192.168.100.1-2’, GatewayMac=’01-02-03-04-05-06-07’ - Matches networks assigned an ip from a DHCP Server of address 192.168.100.1 or 192.168.100.2 configured with a gateway using MAC address 01-02-03-04-05-06-07.

For full details, please see deviceTRUST Property Queries within the deviceTRUST Administration Guide.

The default value is “Status=’Up’”. Status defaults to ‘Up’ unless specified.

Policy setting: Query to include host PRINTERS

Defines one or more queries which can be used to find printers on the local host.

Printers are included within the properties if they match all of the constraints within any of the queries.

The maximum number of printers is limited to the maximum items field, or unlimited when set to zero.

Available constraints include:

  • Text constraints for Name, Server, Share, Port, Location, Driver, DriverFile and DriverManufacturer.
  • Boolean constraints for Default, Local, DirectoryPublished and KeepPrintJobs.
  • Enum constraint for Errors with values Paused, Error, PendingDeletion, PaperJam, PaperOut, PaperProblem, Offline, OutputBinFull, NotAvailable, TonerLow, NoToner, CannotPrintPage, UserIntervention, OutOfMemory, DoorOpen, ServerUnknown, ServerOffline and DriverUpdateNeeded.
  • Version constraint for DriverVersion.

For example:

  • Default=’true’ - Returns just the default printer.
  • Share=’\SERVER??*’, Errors=’*’ - Returns printers which have a share matching the wildcard ‘\SERVER??*’ regardless of the error value.

For full details, please see deviceTRUST Property Queries within the deviceTRUST Administration Guide.

The default value is “Errors!=’Offline;ServerOffline;NotAvailable’”. Errors defaults to all values except ‘Offline;ServerOffline;NotAvailable’ unless specified.

Policy setting: Query to include host USER GROUPS

Defines one or more security groups to potentially include within the host user groups property.

Security groups are included within the user groups property if the logged in user is a member of the security group.

Security groups can be supplied in the format DOMAIN\SecurityGroupName, where DOMAIN is either the SAM compatible domain, or the DNS domain name.

The default value does not include any security groups.

Policy setting: Query to exclude host WINDOWS FIREWALL rules

Defines one or more queries which can be used to exclude inbound and outbound Windows Firewall rules on the local host.

Firewall rules are excluded from the properties if they match all of the constraints within any of the queries.

Firewall rules must be enabled, allowed and assigned to an active profile to be included within the results.

Available constraints include:

  • Text constraints for Name, Description, Group, Program, Service, Package, PackageName, PackageDescription, PackageFullName and PortName.
  • Enum constraint for Type with values Program, Package, Service, System and Any.
  • Enum constraint for Direction with values Inbound and Outbound.
  • Enum constraints for Protocol with values Any, HOPOPT, ICMPv4, IGMP, TCP, UDP, IPv6 IPv6Route, IPv6Frag, GRE, ICMPv6, IPv6NoNxt, IPv6Opts, VRRP, PGM, L2TP, or any protocol number from http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xml.
  • Enum constraints for Profile with values Domain, Private, Public.
  • Number constraint for Port, with additional option to use * to match rules that target any port.

For example:

  • Direction=’Inbound’, Program=’*\MyApp.exe’, Port>=3000, Port<=3002 - Excludes all inbound traffic to MyApp.exe to ports 3000, 3001 and 3002.

For full details, please see deviceTRUST Property Queries within the deviceTRUST Administration Guide.

The default value does not filter the Firewall rules.

Policy setting: Filter host ACCESS POINT ssid, bssid, speed, quality, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_ACCESSPOINT_COUNT
  • HOST_ACCESSPOINT_X_SSID
  • HOST_ACCESSPOINT_X_BSSID
  • HOST_ACCESSPOINT_X_STRENGTH
  • HOST_ACCESSPOINT_X_QUALITY
  • HOST_ACCESSPOINT_X_FREQUENCY
  • HOST_ACCESSPOINT_X_SECURE

Policy setting: Filter host CERTIFICATE store, name, issuer, subject, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_CERTIFICATE_COUNT
  • HOST_CERTIFICATE_X_STORE
  • HOST_CERTIFICATE_X_LOCATION
  • HOST_CERTIFICATE_X_VERSION
  • HOST_CERTIFICATE_X_NAME
  • HOST_CERTIFICATE_X_SUBJECT
  • HOST_CERTIFICATE_X_ISSUER
  • HOST_CERTIFICATE_X_SIGNATUREALGORITHM
  • HOST_CERTIFICATE_X_SERIALNUMBER
  • HOST_CERTIFICATE_X_THUMBPRINT_SHA256
  • HOST_CERTIFICATE_X_TEMPLATE
  • HOST_CERTIFICATE_X_NOTBEFORE
  • HOST_CERTIFICATE_X_NOTAFTER
  • HOST_CERTIFICATE_X_USAGE
  • HOST_CERTIFICATE_X_EXTENDEDUSAGE
  • HOST_CERTIFICATE_X_VERIFICATIONERROR
  • HOST_CERTIFICATE_X_ROOT_NAME
  • HOST_CERTIFICATE_X_ROOT_THUMBPRINT_SHA256

Policy setting: Filter host CUSTOM path, name, value

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_CUSTOM_COUNT
  • HOST_CUSTOM_X_PATH
  • HOST_CUSTOM_X_NAME
  • HOST_CUSTOM_X_VALUE

Policy setting: Filter host DEVICETRUST version number, connected

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior includes all properties. Available properties:

  • HOST_DEVICETRUST_VERSION
  • HOST_DEVICETRUST_CONNECTED

Policy setting: Filter host DISPLAY capabilities

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_DISPLAY_COUNT
  • HOST_DISPLAY_X_NAME
  • HOST_DISPLAY_X_WIDTH
  • HOST_DISPLAY_X_HEIGHT
  • HOST_DISPLAY_X_BPP
  • HOST_DISPLAY_X_DPI
  • HOST_DISPLAY_X_MONITOR_VENDOR
  • HOST_DISPLAY_X_MONITOR_PRODUCT
  • HOST_DISPLAY_X_MONITOR_SERIALNUMBER
  • HOST_DISPLAY_X_MONITOR_EXTERNAL
  • HOST_DISPLAY_X_ADAPTER_VENDOR
  • HOST_DISPLAY_X_ADAPTER_PRODUCT

Policy setting: Filter host DOMAIN, name, dns, sid, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_DOMAIN
  • HOST_DOMAIN_DNS
  • HOST_DOMAIN_SID
  • HOST_DOMAIN_JOINED

Policy setting: Filter host HARDWARE vendor, model, cpu, memory, bios, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior includes all properties. Available properties:

  • HOST_HARDWARE_VENDOR
  • HOST_HARDWARE_MODEL
  • HOST_HARDWARE_CPU
  • HOST_HARDWARE_CPU_SPEED
  • HOST_HARDWARE_CPU_COUNT
  • HOST_HARDWARE_SYSTEMMEMORY
  • HOST_HARDWARE_BIOS_SERIAL
  • HOST_HARDWARE_BIOS_VERSION
  • HOST_HARDWARE_BIOS_RELEASEDATE
  • HOST_HARDWARE_VIRTUALIZATION
  • HOST_HARDWARE_SECUREBOOT
  • HOST_HARDWARE_ROLE
  • HOST_HARDWARE_LID

Policy setting: Filter host INPUT keyboard, mouse, pen and touch

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_INPUT_KEYBOARD
  • HOST_INPUT_MOUSE
  • HOST_INPUT_PEN
  • HOST_INPUT_TOUCH

Policy setting: Filter host LOCATION latitude, longitude, address, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_LOCATION_LATITUDE
  • HOST_LOCATION_LONGITUDE
  • HOST_LOCATION_ACCURACY
  • HOST_LOCATION_URL
  • HOST_LOCATION_COUNTRY_CODE
  • HOST_LOCATION_COUNTRY
  • HOST_LOCATION_POSTCODE
  • HOST_LOCATION_STATE
  • HOST_LOCATION_STATE_DISTRICT
  • HOST_LOCATION_COUNTY
  • HOST_LOCATION_TOWN
  • HOST_LOCATION_STREET
  • HOST_LOCATION_BUILDING

Policy setting: Filter host LOGICAL DISK type, label, file system, free space, vendor, product, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_LOGICALDISK_COUNT
  • HOST_LOGICALDISK_X_TYPE
  • HOST_LOGICALDISK_X_LABEL
  • HOST_LOGICALDISK_X_FLAGS
  • HOST_LOGICALDISK_X_HIDDEN
  • HOST_LOGICALDISK_X_FILESYSTEM
  • HOST_LOGICALDISK_X_DRIVE
  • HOST_LOGICALDISK_X_PATH
  • HOST_LOGICALDISK_X_TOTALMB
  • HOST_LOGICALDISK_X_FREEMB
  • HOST_LOGICALDISK_X_NAME
  • HOST_LOGICALDISK_X_VENDOR_ID
  • HOST_LOGICALDISK_X_PRODUCT_ID
  • HOST_LOGICALDISK_X_SERIALNUMBER
  • HOST_LOGICALDISK_X_BUSTYPE

Policy setting: Filter host MAPPED DRIVE local, remote, user, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_MAPPEDDRIVE_COUNT
  • HOST_MAPPEDDRIVE_X_DRIVE
  • HOST_MAPPEDDRIVE_X_SERVER
  • HOST_MAPPEDDRIVE_X_SHARE
  • HOST_MAPPEDDRIVE_X_HIDDEN
  • HOST_MAPPEDDRIVE_X_USER
  • HOST_MAPPEDDRIVE_X_PROVIDER

Policy setting: Filter host NAME, id, dns, sid, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior includes all properties. Available properties:

  • HOST_NAME
  • HOST_NAME_DNS
  • HOST_NAME_DN
  • HOST_ID
  • HOST_NAME_SID

Policy setting: Filter host NETWORK ip, mac, dns, wifi, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior includes all properties. Available properties:

  • HOST_NETWORK_COUNT
  • HOST_NETWORK_X_STATUS
  • HOST_NETWORK_X_NAME
  • HOST_NETWORK_X_DESCRIPTION
  • HOST_NETWORK_X_TYPE
  • HOST_NETWORK_X_MAC
  • HOST_NETWORK_X_IP
  • HOST_NETWORK_X_IPV4_ENABLED
  • HOST_NETWORK_X_IPV6_ENABLED
  • HOST_NETWORK_X_DNS
  • HOST_NETWORK_X_DNS_SUFFIX
  • HOST_NETWORK_X_GATEWAY
  • HOST_NETWORK_X_GATEWAY_MAC
  • HOST_NETWORK_X_WINS
  • HOST_NETWORK_X_SPEED
  • HOST_NETWORK_X_DHCP_ENABLED
  • HOST_NETWORK_X_DHCP_SERVER
  • HOST_NETWORK_X_DHCP_LEASE
  • HOST_NETWORK_X_DHCP_EXPIRES
  • HOST_NETWORK_X_WIFI_SSID
  • HOST_NETWORK_X_WIFI_BSSID
  • HOST_NETWORK_X_WIFI_STRENGTH
  • HOST_NETWORK_X_WIFI_SECURITY

Policy setting: Filter host OS name, version, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior includes all properties. Available properties:

  • HOST_OS_NAME
  • HOST_OS_DESCRIPTION
  • HOST_OS_VERSION
  • HOST_OS_TYPE
  • HOST_OS_PLATFORM
  • HOST_OS_ID

Policy setting: Filter host PASSWORD POLICY min and max age, length, history, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_POLICY_PASSWORD_MINAGE
  • HOST_POLICY_PASSWORD_MAXAGE
  • HOST_POLICY_PASSWORD_FORCELOGOFF
  • HOST_POLICY_PASSWORD_MINLENGTH
  • HOST_POLICY_PASSWORD_HISTORY

Policy setting: Filter host PERFORMANCE, including bandwidth and latency

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior includes all properties. Available properties:

  • HOST_PERFORMANCE_LATENCY
  • HOST_PERFORMANCE_LATENCY_SPEED
  • HOST_PERFORMANCE_BANDWIDTH
  • HOST_PERFORMANCE_BANDWIDTH_SPEED

Policy setting: Filter host POWER ac, battery, scheme

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_POWER_AC
  • HOST_POWER_BATTERY
  • HOST_POWER_SCHEME

Policy setting: Filter host PRINTER name, share, port, driver, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_PRINTER_COUNT
  • HOST_PRINTER_X_NAME
  • HOST_PRINTER_X_SERVER
  • HOST_PRINTER_X_DEFAULT
  • HOST_PRINTER_X_LOCAL
  • HOST_PRINTER_X_SHARE
  • HOST_PRINTER_X_PORT
  • HOST_PRINTER_X_LOCATION
  • HOST_PRINTER_X_DIRECTORY_PUBLISHED
  • HOST_PRINTER_X_KEEP_PRINT_JOBS
  • HOST_PRINTER_X_ERRORS
  • HOST_PRINTER_X_DRIVER
  • HOST_PRINTER_X_DRIVER_FILE
  • HOST_PRINTER_X_DRIVER_MANUFACTURER
  • HOST_PRINTER_X_DRIVER_VERSION

Policy setting: Filter host REGION time zone, language, locale, keyboard, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_REGION_TIMEZONE_OFFSET
  • HOST_REGION_LANGUAGE
  • HOST_REGION_LOCALE
  • HOST_REGION_KEYBOARD_LANGUAGE
  • HOST_REGION_KEYBOARD_LOCALE

Policy setting: Filter host REMOTE CONTROL active, protocol, remote ip, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior includes all properties. Available properties:

  • HOST_REMOTECONTROL_ACTIVE
  • HOST_REMOTECONTROL_PROTOCOL
  • HOST_REMOTECONTROL_REMOTE_IP
  • HOST_REMOTECONTROL_REMOTE_NAME
  • HOST_REMOTECONTROL_REMOTE_PLATFORM
  • HOST_REMOTECONTROL_GATEWAY
  • HOST_REMOTECONTROL_GATEWAY_IP

Policy setting: Filter host SCREEN SAVER enabled, secure, timeout and filename

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_SCREENSAVER_ENABLED
  • HOST_SCREENSAVER_SECURE
  • HOST_SCREENSAVER_TIMEOUT
  • HOST_SCREENSAVER_FILENAME

Policy setting: Filter host SECURITY PRODUCT antivirus, antispyware, firewall

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_SECURITYPRODUCT_ANTIVIRUS
  • HOST_SECURITYPRODUCT_ANTIVIRUS_NAME
  • HOST_SECURITYPRODUCT_ANTIVIRUS_TIMESTAMP
  • HOST_SECURITYPRODUCT_ANTISPYWARE
  • HOST_SECURITYPRODUCT_ANTISPYWARE_NAME
  • HOST_SECURITYPRODUCT_ANTISPYWARE_TIMESTAMP
  • HOST_SECURITYPRODUCT_FIREWALL
  • HOST_SECURITYPRODUCT_FIREWALL_NAME

Policy setting: Filter host SESSION id, logon & connect time, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior includes all properties. Available properties:

  • HOST_SESSION_ID
  • HOST_SESSION_LOGON_ID
  • HOST_SESSION_LOGON_TIME
  • HOST_SESSION_CONNECT_ID
  • HOST_SESSION_CONNECT_TIME
  • HOST_SESSION_DELIVERY_TYPE
  • HOST_SESSION_DELIVERY_NAME
  • HOST_SESSION_IDLEPERIOD

Policy setting: Filter host SMARTCARDREADER name

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_SMARTCARDREADER_COUNT
  • HOST_SMARTCARDREADER_X_NAME

Policy setting: Filter host USER name, domain, local admin, auth, password age, groups, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior includes all properties. Available properties:

  • HOST_USER_NAME
  • HOST_USER_NAME_DOMAIN
  • HOST_USER_NAME_DOMAIN_DNS
  • HOST_USER_NAME_DN
  • HOST_USER_SID
  • HOST_USER_AUTH
  • HOST_USER_LOCALADMIN
  • HOST_USER_DOMAINLOGON
  • HOST_USER_CACHEDCREDENTIALS
  • HOST_USER_PASSWORD_AGE
  • HOST_USER_PASSWORD_AUTOLOGON
  • HOST_USER_AUTH_PROVIDER
  • HOST_USER_AUTH_PRINCIPAL
  • HOST_USER_GROUPS

Policy setting: Filter host WHOIS ip, dns, isp and country

Enables or disables whois properties of the host.

Whois properties require internet access, and are impacted by the ‘Limit internet dependent properties to specific users’ policy, and also policies within the deviceTRUST\Properties\Whois folder.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior includes all properties. Available properties:

  • HOST_WHOIS_IP
  • HOST_WHOIS_DNS
  • HOST_WHOIS_ISP
  • HOST_WHOIS_COUNTRY

Policy setting: Filter host WINDOWS windows update, uac, internet settings

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_WINDOWS_SECURITY_WINDOWSUPDATE
  • HOST_WINDOWS_SECURITY_UAC
  • HOST_WINDOWS_SECURITY_INTERNETSETTINGS

Policy setting: Filter host WINDOWS DEFENDER status, last scan, versions, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_WINDOWSDEFENDER_STATUS
  • HOST_WINDOWSDEFENDER_LASTQUICKSCAN
  • HOST_WINDOWSDEFENDER_LASTFULLSCAN
  • HOST_WINDOWSDEFENDER_SIGNATURETHREATS
  • HOST_WINDOWSDEFENDER_BEHAVIORTHREATS
  • HOST_WINDOWSDEFENDER_VERSION_ENGINE
  • HOST_WINDOWSDEFENDER_VERSION_ANTIMALWARE
  • HOST_WINDOWSDEFENDER_VERSION_ANTIVIRUS
  • HOST_WINDOWSDEFENDER_VERSION_ANTISPYWARE
  • HOST_WINDOWSDEFENDER_VERSION_NETWORKENGINE
  • HOST_WINDOWSDEFENDER_VERSION_NETWORKDEFINITION

Policy setting: Filter host WINDOWS FIREWALL profile settings, rules, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_WINDOWSFIREWALL_ACTIVEPROFILES_NAME
  • HOST_WINDOWSFIREWALL_ACTIVEPROFILES_DISABLED
  • HOST_WINDOWSFIREWALL_ACTIVEPROFILES_BLOCKALLINBOUND
  • HOST_WINDOWSFIREWALL_ACTIVEPROFILES_INBOUNDALLOWED
  • HOST_WINDOWSFIREWALL_ACTIVEPROFILES_OUTBOUNDALLOWED
  • HOST_WINDOWSFIREWALL_ACTIVEPROFILES_DISABLEDNOTIFICATIONS
  • HOST_WINDOWSFIREWALL_ACTIVEPROFILES_RESPONDTOMULTICAST
  • HOST_WINDOWSFIREWALL_INBOUNDRULES_PROGRAMS
  • HOST_WINDOWSFIREWALL_INBOUNDRULES_PACKAGES
  • HOST_WINDOWSFIREWALL_INBOUNDRULES_SERVICES
  • HOST_WINDOWSFIREWALL_INBOUNDRULES_SYSTEM
  • HOST_WINDOWSFIREWALL_INBOUNDRULES_ANY
  • HOST_WINDOWSFIREWALL_OUTBOUNDRULES_PROGRAMS
  • HOST_WINDOWSFIREWALL_OUTBOUNDRULES_PACKAGES
  • HOST_WINDOWSFIREWALL_OUTBOUNDRULES_SERVICES
  • HOST_WINDOWSFIREWALL_OUTBOUNDRULES_SYSTEM
  • HOST_WINDOWSFIREWALL_OUTBOUNDRULES_ANY

Policy setting: Filter host WINDOWS UPDATE status, last install, pending updates, etc

Enables or disables individual properties of the host.

For more filter details, please see deviceTRUST Property Filters within the deviceTRUST Administration Guide.

The default behavior does not include any properties. Available properties:

  • HOST_WINDOWSUPDATE_ENABLED
  • HOST_WINDOWSUPDATE_VERSION
  • HOST_WINDOWSUPDATE_REBOOTREQUIRED
  • HOST_WINDOWSUPDATE_NOTIFICATIONLEVEL
  • HOST_WINDOWSUPDATE_LASTSEARCH
  • HOST_WINDOWSUPDATE_LASTINSTALL
  • HOST_WINDOWSUPDATE_PENDING_DEFINITION
  • HOST_WINDOWSUPDATE_PENDING_CRITICAL
  • HOST_WINDOWSUPDATE_PENDING_SECURITY
  • HOST_WINDOWSUPDATE_PENDING_ROLLUP
  • HOST_WINDOWSUPDATE_PENDING_SERVICEPACK
  • HOST_WINDOWSUPDATE_PENDING_UPDATE