Home
  •  

Discover Forefront Server Security

Microsoft.ForefrontServer10.Library.ServerRole.Discovery (Discovery)

Knowledge Base article:

Summary

Discovery of Forefront Security servers.

In the current management pack version, this only discovers Forefront Security for Office Communications Server.

Element properties:

TargetMicrosoft.Windows.Computer
EnabledTrue
Frequency14400
RemotableFalse

Object Discovery Details:

Discovered Classes and their attribuets:

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.FilteredRegistryDiscoveryProvider Default

Source Code:

<Discovery ID="Microsoft.ForefrontServer10.Library.ServerRole.Discovery" Enabled="true" Target="Windows!Microsoft.Windows.Computer" ConfirmDelivery="false" Remotable="true" Priority="Normal">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryClass TypeID="Microsoft.ForefrontServer10.Library.ServerRole"/>

  </DiscoveryTypes>

  <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.FilteredRegistryDiscoveryProvider">

    <ComputerName>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <!--

            There is no registry key that was common to all forefront server (Version 10) products, and exclusive to

             them at the same time.  Additionally, since we're not yet shipping native SCOM MPs for FSE/FSSP

             it might be weird to see an entity representing them in the SCOM viewer, if the user installs the FSOCS

             SCOM MP.  Therefore, the ServerRole discovery will still be be the object discovered for all Forefront

             Server products, it will be discovered on a workload by workload basis.

          -->

    <RegistryAttributeDefinitions>

      <RegistryAttributeDefinition>

        <AttributeName>FSOCS1032Key</AttributeName>

        <Path>SOFTWARE\Microsoft\Forefront Server Security\Office Communications Server</Path>

        <PathType>0</PathType>

        <AttributeType>0</AttributeType>

      </RegistryAttributeDefinition>

      <RegistryAttributeDefinition>

        <AttributeName>FSOCS1064Key</AttributeName>

        <Path>SOFTWARE\Wow6432Node\Microsoft\Forefront Server Security\Office Communications Server</Path>

        <PathType>0</PathType>

        <AttributeType>0</AttributeType>

      </RegistryAttributeDefinition>

    </RegistryAttributeDefinitions>

    <Frequency>14400</Frequency>

    <ClassId>$MPElement[Name="Microsoft.ForefrontServer10.Library.ServerRole"]$</ClassId>

    <InstanceSettings>

      <Settings>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Name>

          <Value>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name='System!System.Entity']/DisplayName$</Name>

          <Value>Microsoft Forefront Server Security (Version 10)</Value>

        </Setting>

      </Settings>

    </InstanceSettings>

    <Expression>

      <Or>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">Values/FSOCS1032Key</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">true</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">Values/FSOCS1064Key</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">true</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </Or>

    </Expression>

  </DataSource>

</Discovery>