FPE Server Discovery

Microsoft.ForefrontProtection.FPE.Server.Discovery (Discovery)

Discovery of a server running Microsoft Forefront Protection 2010 for Exchange Server

Knowledge Base article:

Element properties:

Object Discovery Details:

Member Modules:

Source Code:

<Discovery ID="Microsoft.ForefrontProtection.FPE.Server.Discovery" Enabled="true" Target="Windows!Microsoft.Windows.Computer" ConfirmDelivery="false" Remotable="true" Priority="Normal">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryClass TypeID="Microsoft.ForefrontProtection.FPE.Server">

      <Property TypeID="FSS!Microsoft.ForefrontProtection.Library.Server" PropertyID="ServerName"/>

    </DiscoveryClass>

  </DiscoveryTypes>

  <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.FilteredRegistryDiscoveryProvider">

    <ComputerName>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <RegistryAttributeDefinitions>

      <RegistryAttributeDefinition>

        <AttributeName>FPEServerAppExists</AttributeName>

        <Path>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{823E3BED-156C-402a-9937-4040D02F3AE5}</Path>

        <PathType>0</PathType>

        <AttributeType>0</AttributeType>

      </RegistryAttributeDefinition>

      <RegistryAttributeDefinition>

        <AttributeName>FPEServerAppExistsUnderWowNode</AttributeName>

        <Path>SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DE93D4F0-F245-405D-89B2-08C75E0B9A4B}</Path>

        <PathType>0</PathType>

        <AttributeType>0</AttributeType>

      </RegistryAttributeDefinition>

      <RegistryAttributeDefinition>

        <AttributeName>ExchangeServer</AttributeName>

        <Path>SOFTWARE\Microsoft\Forefront Server Security\Exchange Server</Path>

        <PathType>0</PathType>

        <AttributeType>0</AttributeType>

      </RegistryAttributeDefinition>

      <RegistryAttributeDefinition>

        <AttributeName>ExchangeServerUnderWowNode</AttributeName>

        <Path>SOFTWARE\Wow6432Node\Microsoft\Forefront Server Security\Exchange Server</Path>

        <PathType>0</PathType>

        <AttributeType>0</AttributeType>

      </RegistryAttributeDefinition>

    </RegistryAttributeDefinitions>

    <Frequency>14400</Frequency>

    <ClassId>$MPElement[Name="Microsoft.ForefrontProtection.FPE.Server"]$</ClassId>

    <InstanceSettings>

      <Settings>

        <Setting>

          <Name>$MPElement[Name="FSS!Microsoft.ForefrontProtection.Library.Server"]/ServerName$</Name>

          <Value>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Name>

          <Value>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="System!System.Entity"]/DisplayName$</Name>

          <Value>Microsoft Forefront Protection 2010 for Exchange Server</Value>

        </Setting>

      </Settings>

    </InstanceSettings>

    <Expression>

      <Or>

        <Expression>

          <And>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="String">Values/FPEServerAppExists</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="String">true</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="String">Values/ExchangeServer</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="String">true</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </And>

        </Expression>

        <Expression>

          <And>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="String">Values/FPEServerAppExistsUnderWowNode</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="String">true</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="String">Values/ExchangeServerUnderWowNode</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value Type="String">true</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </And>

        </Expression>

      </Or>

    </Expression>

  </DataSource>

</Discovery>