$AVYearFileDate = ($AVPatternFileDate + 1970) # Convert PatternFileDate to readable date $AVPatternFileDate = $AVRegKey.GetValue('PatternFileDate') $SEPVersion = $SMCRegKey.GetValue('ProductVersion') $reg = ::OpenRemoteBaseKey("LocalMachine",$ComputerName) $SylinkKey = "SOFTWARE\\Symantec\\Symantec Endpoint Protection\\SMC\\SYLINK\\SyLink" $AVKey = "SOFTWARE\\Symantec\\Symantec Endpoint Protection\\AV" $SMCKey = "SOFTWARE\\Symantec\\Symantec Endpoint Protection\\SMC" # Create object to enable access to the months of the year ValueFromPipeline=$True,ValueFromPipelineByPropertyName=$True)]
[Parameter(Position=0,Mandatory=$true,HelpMessage="Name of the computer to query SEP for", PatternFileDate : Current Definition dateĢ7 Hex is 39 Decimal, this value is since 1970.
HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV You can get the Info from this Registry Location The PatternFileDate value stored in HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV needs a little figuring out, this posting helps figure it out. The below function will query the registry of a remote machine(s) and report back the state of the installed Symantec SEP client to help perform a true up. However, sometimes you have to work with them and frequently the data in the Management Product does not actually reflect the end user / server estate. I do not, have not ever, nor probably will ever will like any AV Enterprise Management Products.
0 kommentar(er)
