Configurations of devices running Windows operating systems

The current version of the application lets you get the Windows operating system configuration type for devices running operating systems that are supported by Kaspersky Endpoint Agent for Kaspersky Industrial CyberSecurity for Networks integration scenarios.

For the configuration type Windows operating system, you can specify the following configuration components for receiving data:

• Users.
• Groups.
• Applications.
• Patches.
• Services.
• Drivers.
• Scheduled tasks.
• Network shared resources.
• IP-to-network name consistency.
• IP-to-NetBIOS name consistency.
• Startup items.

Retrievable data on users

If the Users configuration component is specified for the configuration control job, the user account data on a device is read when the device is scanned. The application lets you receive the following data on each user account:

• Username in the format domain\username.
• Unique ID of the user.
• Full name of the user (for example, John Smith).
• Indication of whether the user account is active.
• Indication of whether the user account is blocked.
• Indication of whether the user account password may expire.
• Indication of whether the password has expired.
• Indication of whether the user can change their password.
• List of groups that include the user.

Retrievable data on groups

If the Groups configuration component is specified for the configuration control job, the group account data on a device is read when the device is scanned. The application lets you receive the following data on each group account:

• Group name in the format domain\group name.
• Unique ID of the group.
• List of users included in the group. Each item in the list contains the following data:
  • Unique ID of the group member.
  • Name of the group member.

Retrievable data on applications

If the Applications configuration component is specified for the configuration control job, the data on installed applications on a device is read when the device is scanned. The application lets you receive the following data on each application:

• Application name.
• Application vendor.
• Size of the application in bytes.
• Application version.
• Date and time when the application was installed.

Retrievable data on patches

If the Patches configuration component is specified for the configuration control job, the data on installed patches for applications on a device is read when the device is scanned. The application lets you receive the following data on each patch:

• Patch name.
• Application vendor.
• Application for which the patch is installed.
• Patch version.

Retrievable data on services

If the Services configuration component is specified for the configuration control job, the data on registered services on a device is read when the device is scanned. The application lets you receive the following data on each service:

• Service name.
• Full name of the service.
• Startup type.
• Start command.
• Names of dependent services.

Retrievable data on drivers

If the Drivers configuration component is specified for the configuration control job, the data on installed drivers on a device is read when the device is scanned. The application lets you receive the following data on each driver:

• Driver name.
• Full name of the driver.
• Startup type.
• Path to the driver file.
• Names of dependent drivers.

Retrievable data on scheduled tasks

If the Scheduled tasks configuration component is specified for the configuration control job, the data on registered tasks in the Task Scheduler on a device is read when the device is scanned. The application lets you receive the following data on each task:

• Task name.
• Task status.
• Description.
• Creator.
• Commands executed when the task is started (actions related to running the executable code).

Retrievable data on shared network resources

If the Network shared resources configuration component is specified for the configuration control job, the data on created shared network resources on a device is read when the device is scanned. The application lets you receive the following data on each shared network resource:

• Network name of the shared resource.
• Local path to the network resource.
• Description.
• Type of network resource.
• Maximum number of connections.

Retrievable data from the IP-to-network name mapping table

If the IP-to-network name consistency configuration component is specified for the configuration control job, the data on items in the IP-to-network name mapping table (\etc\hosts) on a device is read when the device is scanned. The application lets you receive the following data on each table item:

• IP address.
• Network name.

Retrievable data from the IP-to-NetBIOS name mapping table

If the IP-to-NetBIOS name consistency configuration component is specified for the configuration control job, the data on items in the IP-to-NetBIOS name mapping table (\etc\lmhosts) on a device is read when the device is scanned. The application lets you receive the following data on each table item:

• IP address.
• Network name.
• Indication of whether the entry is loaded into the name cache.
• Specific domain of the entry.
• lmhosts include files.

Retrievable data on startup items

If the Startup items configuration component is specified for the configuration control job, the data on operating system startup items on a device is read when the device is scanned. The application lets you receive the following data on each startup item:

• Information about the startup point (for example, the path in the system registry).
• Executable command or file (COM object).

Page top