Descoberta do Modo de Administração Remota da Função do Terminal Server do Windows 2003 Server

Microsoft.Windows.Server.2003.TerminalServerRole.RemoteAdminMode.Discovery (Discovery)

Descobre o Windows Server que executa o Terminal Server em Modo de Administração Remota (desabilitado por padrão - usar substituições para habilitar)

Knowledge Base article:

Resumo

Descoberta de sistemas executando Serviços de Terminal no modo de Administração Remota (Área de Trabalho Remota).

Configuração

Por padrão, essa regra de descoberta está desabilitada. Se desejado, use substituições para habilitar em sistemas selecionados ou sistemas de grupos.

Element properties:

TargetMicrosoft.Windows.Server.Computer
EnabledFalse
Frequency86400
RemotableFalse

Object Discovery Details:

Discovered Classes and their attribuets:

Member Modules:

ID Module Type TypeId RunAs 
DiscoveryDataSource DataSource Microsoft.Windows.FilteredRegistryDiscoveryProvider Default

Source Code:

<Discovery ID="Microsoft.Windows.Server.2003.TerminalServerRole.RemoteAdminMode.Discovery" Target="Windows!Microsoft.Windows.Server.Computer" Enabled="false">
<Category>Discovery</Category>
<DiscoveryTypes>
<DiscoveryClass TypeID="Microsoft.Windows.Server.2003.TerminalServerRole">
<Property TypeID="TS!Microsoft.Windows.Server.TerminalServerRole" PropertyID="Mode"/>
<Property TypeID="TS!Microsoft.Windows.Server.TerminalServicesRole" PropertyID="StartMode"/>
</DiscoveryClass>
</DiscoveryTypes>
<DataSource ID="DiscoveryDataSource" TypeID="Windows!Microsoft.Windows.FilteredRegistryDiscoveryProvider">
<ComputerName>\\$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<RegistryAttributeDefinitions>
<RegistryAttributeDefinition>
<AttributeName>MS_Windows_CurrentVersion</AttributeName>
<Path>SOFTWARE\Microsoft\Windows NT\CurrentVersion\CurrentVersion</Path>
<PathType>1</PathType>
<AttributeType>1</AttributeType>
</RegistryAttributeDefinition>
<RegistryAttributeDefinition>
<AttributeName>MS_Windows_TS_main</AttributeName>
<Path>SYSTEM\CurrentControlSet\Services\TermService\Start</Path>
<PathType>1</PathType>
<AttributeType>2</AttributeType>
</RegistryAttributeDefinition>
<RegistryAttributeDefinition>
<AttributeName>TS_AppMode</AttributeName>
<Path>SYSTEM\CurrentControlSet\Control\Terminal Server\TSAppCompat</Path>
<PathType>1</PathType>
<AttributeType>2</AttributeType>
</RegistryAttributeDefinition>
<RegistryAttributeDefinition>
<AttributeName>MS_Windows_TS_main_name</AttributeName>
<Path>SYSTEM\CurrentControlSet\Services\TermService\DisplayName</Path>
<PathType>1</PathType>
<AttributeType>1</AttributeType>
</RegistryAttributeDefinition>
</RegistryAttributeDefinitions>
<Frequency>86400</Frequency>
<ClassId>$MPElement[Name="Microsoft.Windows.Server.2003.TerminalServerRole"]$</ClassId>
<InstanceSettings>
<Settings>
<Setting>
<Name>$MPElement[Name="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Name>
<Value>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>
</Setting>
<Setting>
<Name>$MPElement[Name="System!System.Entity"]/DisplayName$</Name>
<Value>$Data/Values/MS_Windows_TS_main_name$</Value>
</Setting>
<Setting>
<Name>$MPElement[Name="TS!Microsoft.Windows.Server.TerminalServerRole"]/Mode$</Name>
<Value>Remote Admin</Value>
</Setting>
<Setting>
<Name>$MPElement[Name="TS!Microsoft.Windows.Server.TerminalServicesRole"]/StartMode$</Name>
<Value>$Data/Values/MS_Windows_TS_main$</Value>
</Setting>
</Settings>
</InstanceSettings>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>Values/MS_Windows_CurrentVersion</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>5.2</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>Values/TS_AppMode</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>0</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<Or>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>Values/MS_Windows_TS_main</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>2</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>Values/MS_Windows_TS_main</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>3</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</Or>
</Expression>
</And>
</Expression>
</DataSource>
</Discovery>