Reference Guide

Security Management Server Virtual v10.2.11 AdminHelp

LEN(DISPLAYNAME)<=10

Working with Complex Queries

Rule Specifications in the Management Console allows users to combine rules to filter a unique set of

devices. For queries that contain multiple options, isolate sub-rules in parenthesis to ensure they are run

separately before they are combined with the larger specification.

This query selects all devices with an operating system named Windows 10 Pro or Windows 10 Ent and

DESKTOP in the hostname:

OS CONTAINS "Windows 10 Pro" OR OS CONTAINS "Windows 10 Ent" AND UID

CONTAINS "DESKTOP"

This query selects any device containing Windows 10 Pro and only devices with the hostname

containing DESKTOP that running an operating system with the name containing Windows 10 Ent:

OS CONTAINS "Windows 10 Pro" OR (OS CONTAINS "Windows 10 Ent" AND UID

CONTAINS "DESKTOP")

Examples

• Using the FQDN of the client computer to attach it to a device group can be done by keying on

any commonality amongst the desired client computers. In the example below, a child domain

of ORGANIZATION, AMERS, represents a domain in America. Additionally, a 2nd child

domain, EMEA, represents non-American based clients.

DISPLAYNAME ENDSWITH “AMERS.ORGANIZATION.COM”

This group will contain all clients that are in the AMERS domain according to their FQDN.

DISPLAYNAME ENDSWITH “EMEA.ORGANIZATION.COM”

This group will contain all clients that are in the EMEA domain according to their FQDN

• If the hostname of the client computers contain several notations that indicate desired ways in

which to create a group, those specific portions can be captured as long as their location is

consistent.

Looking at the hostname: A12345jdoe.AMER.ORGANIZATION.COM

A denotes an asset, while the following 5 digits denotes the asset’s assigned value. The user that was

assigned the asset has their SAM account appended to the end.

You can capture the assigned number of the asset, and that it is within a certain subsection of assets.

This example shows how to look for assets that have a value less than 1000.

MID(DISPLAYNAME , 2, 5) < 1001

This example targets user’s computer where their last name begins with ‘r’.

MID(DISPLAYNAME , 8, 1) = “r”

For instructions about how to add an endpoint, see Add Endpoint Groups

Edit Group Priority

The Group priority feature is used to determine policy precedence for effective policies that affect

multiple groups. Group priority creates a weight associated with the specific group it is assigned to, and

that weight is used to determine which policy setting is applied to an endpoint that is a member of more