write that extended output to readable config file such as XML, namespace, =.. use proper grammer file to read config file.
Set a rule in compliance to check for value exists in config file. if does not exist and then it compliant.
1 of 1 people found this helpful
You need change your VBScript.
Why do not use the inbuild feature.
- Create Component template
- add parts "Administrator" local group by using live browse of any one server
- Create rule (as example see the below role, basically I am checking for administrator is part of administrators group or not)
"Windows Group:Administrators"."User Members (Windows)" contains "administrator"
If you tell me what exactly you want to do, I can probably help you to get exact rule.
As Siddu suggested, I always recommend finding the most simple solution. And using the BSA server objects whenever possible.
If you just want to check to see if any user accounts belong to the Administrators group on a server, the compliance rule would be:
"Windows Group:Administrators"."User Members (Windows)" = null
Leave the field blank and the rule will insert the word "null" in light blue letters. If there are no user accounts added to the Administrators group, this will pass as compliant. If there are any users listed here, it will fail.
Word of warning. If you create a rule with a blank value and BSA adds the word "null" in light blue letters, be careful when you edit the rule. The word "null" will be converted to a text string and saved that way. So make sure you remove the word "null" and save it as a blank value.
Thanks for all replies .. it is done now ..