/build/static/layout/Breadcrumb_cap_w.png

Forefront Definition version display & Report

To Create a method of checking what definition version of Microsoft Forefront Antivirus is running on your devices use the following method;


Firstly go to Inventory>Software and Create a new software inventory.
Use a custom inventory rule with the following values;

RegistryValueReturn(HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft Forefront\Client Security\1.0\AM\Signature Updates, ASSignatureVersion, REG_SZ)
RegistryValueReturn(HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft Forefront\Client Security\1.0\AM\Signature Updates, AVSignatureVersion, REG_SZ)
see image 1


Click save and once a machine checks in you will get this custom inventory report in image 2


As machines check in they will populate this field with the 2 versions AS and AV.
Now you need to create a report to make use of this field.
Go to reports>Select New report
Assign a title and category and if you wish a description.
Report Topic select “Computer”
Click Next
Click Computer Identity information and click the checkbox for “System Name” then select the “Custom Fields” and tick the check box
“Microsoft Forefront Definition Version” (or whatever you called the custom inventory).
Image 3

Click next

Then click on next again

Then save
image 4

You then need to edit the report again and modify the SQL query.
Where you see “DATE_FIELD_VALUE” replace the DATE with STR so it is “STR_FIELD_VALUE”
Save this query
The entire Query should look similar to

SELECT MACHINE.NAME AS SYSTEM_NAME,(SELECT MACHINE_CUSTOM_INVENTORY.STR_FIELD_VALUE FROM MACHINE_CUSTOM_INVENTORY WHERE MACHINE_CUSTOM_INVENTORY.ID=MACHINE.ID AND MACHINE_CUSTOM_INVENTORY.SOFTWARE_ID=7222) AS MACHINE_CUSTOM_INVENTORY_2_7222 FROM MACHINE WHERE ((1 in (select 1 from MACHINE_CUSTOM_INVENTORY where MACHINE.ID = MACHINE_CUSTOM_INVENTORY.ID and MACHINE_CUSTOM_INVENTORY.SOFTWARE_ID = 7222 and MACHINE_CUSTOM_INVENTORY.STR_FIELD_VALUE is not null)) ) ORDER BY SYSTEM_NAME

You will have a few different values because your software ID will be different.

Run and view your report for the results.








0 Comments   [ + ] Show comments

Answers (0)

Be the first to answer this question

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ