This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos SQL\ DB Query - Sophos EC 51

Hi All,

need to find and list what applications has been allowed for a particular Group. I Couldn't find/ Guess which table is holding the Application Control information. Any help is appreciated a lot.

Thank you in Advance AK

This thread was automatically locked due to age.

Parents

0 jak over 13 years ago

HI,

Not sure if you need to parse the XML in teh SQL but this will give you the info you need.

select p.PolicyXML, gp.PathAndName from [dbo].Policies as p 
inner join [dbo].[GroupPolicyMapping] as pgm 
inner join GroupPathAndNameTable() as gp on gp.GroupID = pgm.GroupID
on pgm.PolicyID = p.ID
where p.type = 7
and 
gp.PathAndName =N'Servers\g1\g2'

This will give you XML which will have the sections such as:

<ac:applicationSet behaviour="allow">
    <ac:application value="CompuTrace" />
    <ac:application value="LogMeIn" />
    <ac:application value="RealVNC" />
    <ac:application value="Remote Desktop Connection (V7 and higher)" />
    <ac:application value="Remote Desktop Connection 6.0" />
    <ac:application value="TeamViewer" />
    <ac:application value="TeamViewer Quick Support" />
    <ac:application value="TightVNC" />
    <ac:application value="UltraVNC" />
  </ac:applicationSet>

Regards,

Jak

Reply

0 jak over 13 years ago

HI,

Not sure if you need to parse the XML in teh SQL but this will give you the info you need.

select p.PolicyXML, gp.PathAndName from [dbo].Policies as p 
inner join [dbo].[GroupPolicyMapping] as pgm 
inner join GroupPathAndNameTable() as gp on gp.GroupID = pgm.GroupID
on pgm.PolicyID = p.ID
where p.type = 7
and 
gp.PathAndName =N'Servers\g1\g2'

This will give you XML which will have the sections such as:

<ac:applicationSet behaviour="allow">
    <ac:application value="CompuTrace" />
    <ac:application value="LogMeIn" />
    <ac:application value="RealVNC" />
    <ac:application value="Remote Desktop Connection (V7 and higher)" />
    <ac:application value="Remote Desktop Connection 6.0" />
    <ac:application value="TeamViewer" />
    <ac:application value="TeamViewer Quick Support" />
    <ac:application value="TightVNC" />
    <ac:application value="UltraVNC" />
  </ac:applicationSet>

Regards,

Jak

Children

No Data