deviceTRUST 19.2 is now available and includes the new macOS Client and an updated iOS Client. See the release notes for more information.

Policy category: Triggers

  1. Policy setting: Enable demo mode triggers
  2. Policy setting: Order to execute SYSTEM and USER triggers
  3. Policy setting: Wait for LOGON triggers before displaying the virtual session
  4. Policy setting: Wait for RECONNECT triggers before displaying the virtual session
  5. Policy setting: Refresh host properties before LOGON SHELL START
  6. Policy setting: Refresh host properties before LOGON SHELL READY and RECONNECT SHELL READY
  7. Policy setting: Delay Citrix policies on LOGON and RECONNECT
  8. Policy setting: Override PowerShell execution policy of triggered scripts
  9. Policy setting: Trigger to launch on LOGON with USER privileges
  10. Policy setting: Trigger to launch on LOGOFF with USER privileges
  11. Policy setting: Trigger to launch on RECONNECT with USER privileges
  12. Policy setting: Trigger to launch on DISCONNECT with USER privileges
  13. Policy setting: Trigger to launch on LOGON SHELL START with USER privileges
  14. Policy setting: Trigger to launch on LOGON SHELL READY with USER privileges
  15. Policy setting: Trigger to launch on RECONNECT SHELL READY with USER privileges
  16. Policy setting: Trigger to launch on PROPERTY CHANGED with USER privileges
  17. Policy setting: Trigger to launch on CONTEXT CHANGED with USER privileges
  18. Policy setting: Trigger to launch on LOGON with SYSTEM privileges
  19. Policy setting: Trigger to launch on LOGOFF with SYSTEM privileges
  20. Policy setting: Trigger to launch on RECONNECT with SYSTEM privileges
  21. Policy setting: Trigger to launch on DISCONNECT with SYSTEM privileges
  22. Policy setting: Trigger to launch on LOGON SHELL START with SYSTEM privileges
  23. Policy setting: Trigger to launch on LOGON SHELL READY with SYSTEM privileges
  24. Policy setting: Trigger to launch on RECONNECT SHELL READY with SYSTEM privileges
  25. Policy setting: Trigger to launch on PROPERTY CHANGED with SYSTEM privileges
  26. Policy setting: Trigger to launch on CONTEXT CHANGED with SYSTEM privileges

Policy setting: Enable demo mode triggers

Enables or disables demo mode.

  • When ENABLED, deviceTRUST will launch a process which displays the state of the properties on Logon, Logon Shell Start, Logon Shell Ready, Reconnect, Reconnect Shell Ready and Disconnect triggers. On a Property Changed trigger the list of property changes are displayed, including their previous values.

  • When DISABLED, deviceTRUST does not launch demo mode processes.

  • When set to ‘Batch File’, the launched process will be the Windows command interpreter with a batch file.

  • When set to ‘PowerShell Script’, the launched process will be Windows PowerShell with a script file.

  • When set to VBScript, the launched process will be the Windows Script Host with a script file.

The default behavior is disabled.

Policy setting: Order to execute SYSTEM and USER triggers

Determines the order in which SYSTEM and USER triggers are executed.

  • When set to ‘SYSTEM and USER’, both the SYSTEM and USER triggers are executed at the same time, and in parallel.

  • When set to ‘SYSTEM then USER’, the SYSTEM trigger is executed, and then once complete, the USER trigger is executed.

  • When set to ‘USER then SYSTEM’, the USER trigger is executed, and then once complete, the SYSTEM trigger is executed.

The default value is ‘SYSTEM and USER’.

Policy setting: Wait for LOGON triggers before displaying the virtual session

Determines whether the virtual session is blocked until Logon triggers have completed.

  • When ENABLED, deviceTRUST will block the virtual session until the Logon triggers have finished executing. During this time, the executing trigger message is displayed. Care should be taken to ensure that the Logon triggers execute in a timely manner.

  • When DISABLED, deviceTRUST will display the virtual session whilst the Logon triggers execute.

The default behavior is enabled.

Policy setting: Wait for RECONNECT triggers before displaying the virtual session

Determines whether the virtual session is blocked until Reconnect triggers have completed.

  • When ENABLED, deviceTRUST will block the virtual session until the Reconnect triggers have finished executing. During this time, the executing trigger message is displayed. Care should be taken to ensure that the Reconnect triggers execute in a timely manner.

  • When DISABLED, deviceTRUST will display the virtual session whilst the Reconnect triggers execute.

The default behavior is enabled.

Policy setting: Refresh host properties before LOGON SHELL START

Determines whether host properties are refreshed before the Logon Shell Start trigger is executed.

  • When ENABLED, deviceTRUST will refresh all host properties before executing the Logon Shell Start triggers.

  • When DISABLED, deviceTRUST will execute the Logon Shell Start triggers without refreshing the host properties.

The default behavior is disabled.

Policy setting: Refresh host properties before LOGON SHELL READY and RECONNECT SHELL READY

Determines whether host properties are refreshed before the Logon Shell Ready and Reconnect Shell Ready triggers are executed.

  • When ENABLED, deviceTRUST will refresh all host properties before executing the Logon Shell Ready or Reconnect Shell Ready triggers.

  • When DISABLED, deviceTRUST will execute the Logon Shell Ready and Reconnect Shell Ready triggers without refreshing the host properties.

The default behavior is disabled.

Policy setting: Delay Citrix policies on LOGON and RECONNECT

Determines whether to delay the processing of Citrix policies until after the Logon or Reconnect triggers have executed.

  • When ENABLED, deviceTRUST will delay the processing of Citrix policies until after the Logon or Reconnect triggers have executed. Citrix policies are only delayed for connections which use the ICA protocol.

  • When DISABLED deviceTRUST does not delay the processing of Citrix policies.

The default behavior is disabled.

Policy setting: Override PowerShell execution policy of triggered scripts

Allows the execution policy of deviceTRUST triggered PowerShell scripts to be overridden.

  • When ENABLED, overrides the PowerShell execution policy for all triggered PowerShell scripts. The PowerShell execution policy of the local machine is left unchanged. Can be set to AllSigned, RemoteSigned, Unrestricted or Bypass. For more information, consult the PowerShell help.

The default behavior is to not override the execution policy of the local machine.

Policy setting: Trigger to launch on LOGON with USER privileges

Defines a process or script to execute with USER privileges on Logon.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.

Policy setting: Trigger to launch on LOGOFF with USER privileges

Defines a process or script to execute with USER privileges on Logoff.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.

Policy setting: Trigger to launch on RECONNECT with USER privileges

Defines a process or script to execute with USER privileges on Reconnect.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.

Policy setting: Trigger to launch on DISCONNECT with USER privileges

Defines a process or script to execute with USER privileges on Disconnect.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.

Policy setting: Trigger to launch on LOGON SHELL START with USER privileges

Defines a process or script to execute with USER privileges before the shell is started.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.

Policy setting: Trigger to launch on LOGON SHELL READY with USER privileges

Defines a process or script to execute with USER privileges during Logon when the shell is ready to use.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.

Policy setting: Trigger to launch on RECONNECT SHELL READY with USER privileges

Defines a process or script to execute with USER privileges during Reconnect when the shell is ready to use.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.

Policy setting: Trigger to launch on PROPERTY CHANGED with USER privileges

Defines a process or script to execute with USER privileges on Property Changed.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.

Policy setting: Trigger to launch on CONTEXT CHANGED with USER privileges

Defines a process or script to execute with USER privileges on Context Changed.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.

Policy setting: Trigger to launch on LOGON with SYSTEM privileges

Defines a process or script to execute with SYSTEM privileges on Logon.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.

Policy setting: Trigger to launch on LOGOFF with SYSTEM privileges

Defines a process or script to execute with SYSTEM privileges on Logoff.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.

Policy setting: Trigger to launch on RECONNECT with SYSTEM privileges

Defines a process or script to execute with SYSTEM privileges on Reconnect.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.

Policy setting: Trigger to launch on DISCONNECT with SYSTEM privileges

Defines a process or script to execute with SYSTEM privileges on Disconnect.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.

Policy setting: Trigger to launch on LOGON SHELL START with SYSTEM privileges

Defines a process or script to execute with SYSTEM privileges before the shell is started.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.

Policy setting: Trigger to launch on LOGON SHELL READY with SYSTEM privileges

Defines a process or script to execute with SYSTEM privileges during Logon when the shell is ready to use.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.

Policy setting: Trigger to launch on RECONNECT SHELL READY with SYSTEM privileges

Defines a process or script to execute with SYSTEM privileges during Reconnect when the shell is ready to use.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.

Policy setting: Trigger to launch on PROPERTY CHANGED with SYSTEM privileges

Defines a process or script to execute with SYSTEM privileges on Property Changed.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.

Policy setting: Trigger to launch on CONTEXT CHANGED with SYSTEM privileges

Defines a process or script to execute with SYSTEM privileges on Context Changed.

The Type can be set to Executable, Batch, PowerShell or VBScript, and the Filename should be set to the full path of an executable, batch, PowerShell or VBScript script respectively. Command line arguments can optionally be specified in the Arguments field.

Hidden will ensure that any command window is hidden. The command window will also be hidden when Capture Output is enabled, or when Failure is set to Exit Code and Error Message.

The timeout specifies a maximum time in seconds to wait for the trigger to complete.

Capture Output will capture up to 512 characters from both output and error messages written to a command window. Checking this option will also automatically hide the command window.

Failure determines how deviceTRUST detects that the process has failed. deviceTRUST will treat the process as a failure:

  • When None, if the process fails to execute or a timeout occurs.
  • When ‘Exit Code’, as above but also if the exit code is not zero.
  • When ‘Exit Code and Error Message’, as above but also if any error messages are generated by the process. Selecting this option will also automatically hide the command window.

Environment variables are available representing the context of the trigger.

The default behavior does not specify a trigger to run.