Met deze detectieregel wordt de groep 'RODC-groep' ingevuld
Deze detectieregel detecteert alleen-lezen domeincontrollers (RODC's) om de 'RODC-groep' in te vullen.
Er is geen configuratie vereist. Schakel deze detectieregel niet uit.
Target | Microsoft.Windows.Server.2016.AD.RODCGroup |
Enabled | True |
Remotable | False |
Discovered relationships and their attribuets: |
---|
ID | Module Type | TypeId | RunAs |
---|---|---|---|
GroupPopulationDataSource | DataSource | Microsoft.SystemCenter.GroupPopulator | Default |
<Discovery ID="Microsoft.Windows.Server.2016.AD.RODCGroup.Discovery" Enabled="true" Target="Microsoft.Windows.Server.2016.AD.RODCGroup" ConfirmDelivery="false" Remotable="true" Priority="Normal">
<Category>Discovery</Category>
<DiscoveryTypes>
<DiscoveryRelationship TypeID="SCIGL!Microsoft.SystemCenter.InstanceGroupContainsEntities"/>
</DiscoveryTypes>
<DataSource ID="GroupPopulationDataSource" TypeID="SC!Microsoft.SystemCenter.GroupPopulator">
<RuleId>$MPElement$</RuleId>
<GroupInstanceId>$MPElement[Name="Microsoft.Windows.Server.2016.AD.RODCGroup"]$</GroupInstanceId>
<MembershipRules>
<MembershipRule>
<MonitoringClass>$MPElement[Name="Microsoft.Windows.Server.2016.AD.DomainControllerRole"]$</MonitoringClass>
<RelationshipClass>$MPElement[Name="SCIGL!Microsoft.SystemCenter.InstanceGroupContainsEntities"]$</RelationshipClass>
<Expression>
<SimpleExpression>
<ValueExpression>
<Property>$MPElement[Name="Microsoft.Windows.Server.2016.AD.DomainControllerRole"]/IsRODC$</Property>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>True</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</MembershipRule>
</MembershipRules>
</DataSource>
</Discovery>