Windows 2000 Server Terminal Server Role Application Mode Discovery

Microsoft.Windows.Server.2000.TerminalServerRole.AppMode.Discovery (Discovery)

Discovers Windows Server running Terminal Server in Application Mode (enabled by default)

Knowledge Base article:

Summary

Discovery of a system running Terminal Services in Application mode

Configuration

This discovery rule is enabled by default.

Element properties:

Target	Microsoft.Windows.Server.Computer
Enabled	True
Frequency	86400
Remotable	False

Object Discovery Details:

Discovered Classes and their attribuets:
Microsoft.Windows.Server.2000.TerminalServerRole Mode StartMode

Member Modules:

ID	Module Type	TypeId	RunAs
DiscoveryDataSource	DataSource	Microsoft.Windows.FilteredRegistryDiscoveryProvider	Default

Source Code:

<Discovery ID="Microsoft.Windows.Server.2000.TerminalServerRole.AppMode.Discovery" Target="Windows!Microsoft.Windows.Server.Computer" Enabled="onEssentialMonitoring">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryClass TypeID="Microsoft.Windows.Server.2000.TerminalServerRole">

      <Property TypeID="TS!Microsoft.Windows.Server.TerminalServerRole" PropertyID="Mode"/>

      <Property TypeID="TS!Microsoft.Windows.Server.TerminalServicesRole" PropertyID="StartMode"/>

    </DiscoveryClass>

  </DiscoveryTypes>

  <DataSource ID="DiscoveryDataSource" TypeID="Windows!Microsoft.Windows.FilteredRegistryDiscoveryProvider">

    <ComputerName>\\$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <RegistryAttributeDefinitions>

      <RegistryAttributeDefinition>

        <AttributeName>MS_Windows_CurrentVersion</AttributeName>

        <Path>SOFTWARE\Microsoft\Windows NT\CurrentVersion\CurrentVersion</Path>

        <PathType>1</PathType>

        <AttributeType>1</AttributeType>

      </RegistryAttributeDefinition>

      <RegistryAttributeDefinition>

        <AttributeName>MS_Windows_TS_main</AttributeName>

        <Path>SYSTEM\CurrentControlSet\Services\TermService\Start</Path>

        <PathType>1</PathType>

        <AttributeType>2</AttributeType>

      </RegistryAttributeDefinition>

      <RegistryAttributeDefinition>

        <AttributeName>TS_AppMode</AttributeName>

        <Path>SYSTEM\CurrentControlSet\Control\Terminal Server\TSAppCompat</Path>

        <PathType>1</PathType>

        <AttributeType>2</AttributeType>

      </RegistryAttributeDefinition>

      <RegistryAttributeDefinition>

        <AttributeName>MS_Windows_TS_main_name</AttributeName>

        <Path>SYSTEM\CurrentControlSet\Services\TermService\DisplayName</Path>

        <PathType>1</PathType>

        <AttributeType>1</AttributeType>

      </RegistryAttributeDefinition>

    </RegistryAttributeDefinitions>

    <Frequency>86400</Frequency>

    <ClassId>$MPElement[Name="Microsoft.Windows.Server.2000.TerminalServerRole"]$</ClassId>

    <InstanceSettings>

      <Settings>

        <Setting>

          <Name>$MPElement[Name="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Name>

          <Value>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="System!System.Entity"]/DisplayName$</Name>

          <Value>$Data/Values/MS_Windows_TS_main_name$</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="TS!Microsoft.Windows.Server.TerminalServerRole"]/Mode$</Name>

          <Value>Application</Value>

        </Setting>

        <Setting>

          <Name>$MPElement[Name="TS!Microsoft.Windows.Server.TerminalServicesRole"]/StartMode$</Name>

          <Value>$Data/Values/MS_Windows_TS_main$</Value>

        </Setting>

      </Settings>

    </InstanceSettings>

    <Expression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>Values/MS_Windows_CurrentVersion</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>5.0</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>Values/TS_AppMode</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>1</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <Or>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery>Values/MS_Windows_TS_main</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value>2</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery>Values/MS_Windows_TS_main</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value>3</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </Or>

        </Expression>

      </And>

    </Expression>

  </DataSource>

</Discovery>