DirectAccess discovery

Microsoft.Forefront.UAG.DirectAccessDiscovery (Discovery)

DirectAccess is an optional feature of Windows Server 2008 R2 that will host, manage, and either terminate or pass-through IPsec sessions. The DirectAccess server is a server function and cannot be installed on a client computer running Windows 7.
Discovery of DirectAccess happens only if the machine is discovered as a Forefront UAG server. The registry key HKLM\Software\WhaleCom\e-Gap\Configuration\DirectAccess\MachineState, value=1 is checked. This key is automatically created during the configuration of the Forefront UAG server.

Knowledge Base article:

Summary

DirectAccess is an optional feature of Windows Server 2008 R2 that will host, manage, and either terminate or pass-through IPsec sessions.

Configuration

Discovery of DirectAccess happens only if the machine is discovered as a Forefront UAG server. The following registry key is checked: HKLM\Software\WhaleCom\e-Gap\Configuration\DirectAccess\MachineState, value=1.

Element properties:

Target	Microsoft.Forefront.UAG.Server
Enabled	True
Frequency	14400
Remotable	False

Object Discovery Details:

Discovered Classes and their attribuets:
Microsoft.Forefront.UAG.DirectAccess ID DisplayName
Discovered relationships and their attribuets:
Microsoft.Forefront.UAG.ServerHostsDirectAccess

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	Microsoft.Windows.FilteredRegistryDiscoveryProvider	Default

Source Code:

<Discovery ID="Microsoft.Forefront.UAG.DirectAccessDiscovery" Enabled="true" Target="Microsoft.Forefront.UAG.Server" ConfirmDelivery="true" Remotable="true" Priority="Normal">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryClass TypeID="Microsoft.Forefront.UAG.DirectAccess">

      <Property TypeID="Microsoft.Forefront.UAG.DirectAccess" PropertyID="ID"/>

      <Property TypeID="System!System.Entity" PropertyID="DisplayName"/>

    </DiscoveryClass>

    <DiscoveryRelationship TypeID="Microsoft.Forefront.UAG.ServerHostsDirectAccess"/>

  </DiscoveryTypes>

  <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.FilteredRegistryDiscoveryProvider">

    <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <RegistryAttributeDefinitions>

      <RegistryAttributeDefinition>

        <AttributeName>DirectAccessExists</AttributeName>

        <Path>Software\WhaleCom\e-Gap\Configuration\DirectAccess\MachineState</Path>

        <PathType>1</PathType>

        <AttributeType>2</AttributeType>

      </RegistryAttributeDefinition>

    </RegistryAttributeDefinitions>

    <Frequency>14400</Frequency>

    <ClassId>$MPElement[Name="Microsoft.Forefront.UAG.DirectAccess"]$</ClassId>

    <InstanceSettings>

      <Settings>

        <Setting>

          <Name>$MPElement[Name="Microsoft.Forefront.UAG.DirectAccess"]/ID$</Name>

          <Value>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Name>

          <Value>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="System!System.Entity"]/DisplayName$</Name>

          <Value>DirectAccess</Value>

        </Setting>

      </Settings>

    </InstanceSettings>

    <Expression>

      <SimpleExpression>

        <ValueExpression>

          <XPathQuery Type="String">Values/DirectAccessExists</XPathQuery>

        </ValueExpression>

        <Operator>Equal</Operator>

        <ValueExpression>

          <Value Type="String">1</Value>

        </ValueExpression>

      </SimpleExpression>

    </Expression>

  </DataSource>

</Discovery>