Summary
Compares an Environment Variable of a process to a specified value
Most users will never create their own versions of these filters and will only use the two we have defined.
Manual Application Compatibility Setting will probably not be used by any customers, but for those who would implement it, it targets any application that is forced to run in compatibility mode. For example, if you right-click on an application on your computer and then click properties and then compatibility, if you then select "Run this program in compatibility mode for: Windows XP" you are making it so whenever you now launch that application the environmental variable "__COMBAT_LAYER" Is added to the application. A customer would use this filter to detect any application that is being run in compatibility mode.
User Requested Run as Administrator filter is used to catch when a user right-clicks an application and then selects Arellia's "Request Run As Administrator" (see http://portal.arellia.com/wiki/display/ACS71DOC/Self-Elevation ). This filter is used in the built-in "User Requested Elevation Justification Policy" which will then show a justification message box and then elevate the application. Customers can clone this ACS Policy and create several different policies for specific user groups, thus VIPs can justify and elevate, and normal users will only be able to send a justification but not elevate. (that's just one example of how they could set it up).
Use the 2 defined Environmental Variable Filters
Most users will never create their own versions of these filters and will only use the two we have defined.
Manual Application Compatibility Setting will probably not be used by any customers, but for those who would implement it, it targets any application that is forced to run in compatibility mode. For example, if you right-click on an application on your computer and then click properties and then compatibility, if you then select "Run this program in compatibility mode for: Windows XP" you are making it so whenever you now launch that application the environmental variable "__COMBAT_LAYER" Is added to the application. A customer would use this filter to detect any application that is being run in compatibility mode.
User Requested Run as Administrator filter is used to catch when a user right-clicks an application and then selects Arellia's "Request Run As Administrator" (see http://portal.arellia.com/wiki/display/ACS71DOC/Self-Elevation ). This filter is used in the built-in "User Requested Elevation Justification Policy" which will then show a justification message box and then elevate the application. Customers can clone this ACS Policy and create several different policies for specific user groups, thus VIPs can justify and elevate, and normal users will only be able to send a justification but not elevate. (that's just one example of how they could set it up).
Environment Variable Filter
An Environment Variable Filter compares an environment variable of a process to a specified value.
Standard Environment Filters
Name |
Description |
|---|---|
Manual Application Compatibility Setting |
Detects whether an application is being run with environment variable based(manual) application compatibility options |
User Requested Run As Admininstrator |
Filter used to determine whether a User has requested the ACS "Run as Administrator" |
Adding an Environment Variable Filter
- Right-click My Filters and Select New > Dynamic Filters > Environment Filters
- Edit the following values as needed:
Field |
Description |
|---|---|
Name |
The environment variable name to test |
Value |
The value to compare against. |
Match Type |
Match option of either: Partial, Exact or Regular Expression |
Existence Test
If Value is not specified and the Match Type is partial, then the filter is an existence test.