WindowsApplicationCriteria

This class represents the match criteria for identifying a Windows application right.

Syntax

public interface IWindowsApplicationCriteria

Methods

The WindowsApplicationCriteria class provides the following method.

This method Does this

Validate

Determines whether the match criteria is valid.

Properties

The WindowsApplicationCriteria class provides the following match criteria properties that correspond to the fields displayed on the Match Criteria tab in Access Manager:

This property Does this

Argument

Gets or sets the arguments allowed with this Windows application right.

CompanyName

Gets or sets the company name to match to identify the Windows application associated with this right.

CompanyNameMatchOption

Specifies whether the string specified for the CompanyName property must be an exact match or a partial match.

Description

Gets or sets the description for the match criteria defined for a specific application right.

FileDescription

Gets or sets the file description to match to identify the Windows application associated with this right.

FileDescriptionMatchOption

Specifies whether the string specified for the FileDescription property must be an exact match or a partial match.

FileHash

Gets or sets the encrypted file hash to match to identify the Windows application associated with this right. The file hash is generated using the SHA-1 encryption algorithm, which is FIPS-compliant.

FileName

Gets or sets the file name to match to identify the Windows application associated with this right.

FileType

Gets or sets the type of executable file to match to identify the Windows application associated with this right.

FileVersion

Gets or sets the file version to match to identify the Windows application associated with this right.

FileVersionMatchOption

Specifies whether the version must be equal to, earlier than or equal to, or later than or equal to the version specified for the FileVersion property.

IsArgumentCaseSensitive

Specifies whether arguments for the Argument property are case‑sensitive.

IsArgumentExactMatch

Specifies whether the string specified for the Argument property must be an exact match or a partial match.

LocalOwner

Gets or sets the local user name or group name to match to allow the use of this Windows application right.

OwnerDN

Specifies the distinguished name of the Active Directory user or group who is the file owner to match to identify the Windows application associated with this right.

OwnerSid

Specifies the security identifier of the Active Directory user or group who is the file owner to match to identify the Windows application associated with this right.

OwnerType

Gets or sets the type of owner to match to allow the use of this Windows application right.

Path

Gets or sets the path to the executable to match to identify the Windows application associated with this right.

ProductName

Gets or sets the product name to match to identify the Windows application associated with this right.

ProductNameMatchOption

Specifies whether the string specified for the ProductName property must be an exact match or a partial match.

ProductVersion

Gets or sets the product version to match to identify the Windows application associated with this right.

ProductVersionMatchOption

Specifies whether the version must be equal to, earlier than or equal to, or later than or equal to the version specified for the ProductVersion property.

Publisher

Gets or sets the publisher name to match to identify the Windows application associated with this right.

PublisherMatchOption

Specifies whether the publisher must be an exact match, partial match, start with, or end with the string specified for the Publisher property.

RequireAdministrator

Specifies whether the Windows application associated with this right requires an administrative user account.

SerialNumber

Gets or sets the volume serial number to match to identify the Windows application associated with this right.

SerialNumberMatchOption

Specifies whether the volume serial number must be an exact match, partial match, start with, or end with the string specified for the SerialNumber property.

Discussion

A Windows application right enables a user to run a Windows application with the privileges of another user or as a member of an Active Directory or built-in group. For example, you can use a Windows application right to give a standard Windows user elevated privileges to run an database management application as a database administrator. You can define the criteria to use to identify the Windows application associated with an application right using the WindowsApplicationCriteria properties.