Restrictions

Restriction options

The following restriction types are supported for messages:

• Applications

• Network

• Directory service - Objects

• Directory service - Attributes

• Registry

Every restriction type has a tab within the message dialog. These tabs are collapsed by default and can be made visible by clicking on the + button.

Relationship between restriction types

Restrictions will be processed according to the following rule: A message will be displayed only if at least one match is found for each restriction type. That means, restrictions of the same type have an OR-relation. Restrictions of different types have an AND-releation.

Example

Message

Explanation

The defined message should only be displayed if notepad.exe and/or calc.exe are executed AND the user is User-Admin and/or the logged in user is member of the Marketing group.

Client I

Result

Message will NOT be displayed.

Explanation

Client I executes notepad.exe. However there is no matching directory service object. Therefore the message will not be display.

Client II

Result

Message will be displayed.

Explanation

Client II executes calc.exe and the logged in user is member of the Marketing group.