Restriction options
The following restriction types are supported for messages:
-
Applications
-
Network
-
Directory service - Objects
-
Directory service - Attributes
-
Registry
Every restriction type has a tab within the message dialog. These tabs are collapsed by default and can be made visible by clicking on the + button.
Relationship between restriction types
Restrictions will be processed according to the following rule: A message will be displayed only if at least one match is found for each restriction type. That means, restrictions of the same type have an OR-relation. Restrictions of different types have an AND-releation.
Example
Message
|
Applications |
Network |
Directory service objects |
Directory service attributes |
Registry |
|---|---|---|---|---|
|
notepad.exe |
|
[User] Admin |
|
|
|
calc.exe |
|
[Group] Marketing |
|
|
Explanation
The defined message should only be displayed if notepad.exe and/or calc.exe are executed AND the user is User-Admin and/or the logged in user is member of the Marketing group.
Client I
|
Applications |
notepad.exe |
explorer.exe |
|---|---|---|
|
Network |
192.168.1.10 |
|
|
Directory service objects |
[User] User-1 |
[Group] Developer |
|
Directory service attributes |
|
|
|
Registry |
|
|
Result
Message will NOT be displayed.
Explanation
Client I executes notepad.exe. However there is no matching directory service object. Therefore the message will not be display.
Client II
|
Applications |
calc.exe |
iexplore.exe |
|---|---|---|
|
Network |
192.168.1.12 |
192.168.10.12 |
|
Directory service objects |
[User] Benutzer-0 |
[Group] Marketing |
|
Directory service attributes |
Attribute-1 |
|
|
Registry |
|
|
Result
Message will be displayed.
Explanation
Client II executes calc.exe and the logged in user is member of the Marketing group.