WindowsApplicationCriteria

This class represents the match criteria for identifying a Windows application right.

Syntax

public interface IWindowsApplicationCriteria

Methods

The WindowsApplicationCriteria class provides the following method.

This method	Does this
Validate	Determines whether the match criteria is valid.

Properties

The WindowsApplicationCriteria class provides the following match criteria properties that correspond to the fields displayed on the Match Criteria tab in Access Manager:

This property	Does this
Argument	Gets or sets the arguments allowed with this Windows application right.
CompanyName	Gets or sets the company name to match to identify the Windows application associated with this right.
CompanyNameMatchOption	Specifies whether the string specified for the CompanyName property must be an exact match or a partial match.
Description	Gets or sets the description for the match criteria defined for a specific application right.
FileDescription	Gets or sets the file description to match to identify the Windows application associated with this right.
FileDescriptionMatchOption	Specifies whether the string specified for the FileDescription property must be an exact match or a partial match.
FileHash	Gets or sets the encrypted file hash to match to identify the Windows application associated with this right. The file hash is generated using the SHA-1 encryption algorithm, which is FIPS-compliant.
FileName	Gets or sets the file name to match to identify the Windows application associated with this right.
FileType	Gets or sets the type of executable file to match to identify the Windows application associated with this right.
FileVersion	Gets or sets the file version to match to identify the Windows application associated with this right.
FileVersionMatchOption	Specifies whether the version must be equal to, earlier than or equal to, or later than or equal to the version specified for the FileVersion property.
IsArgumentCaseSensitive	Specifies whether arguments for the Argument property are case‑sensitive.
IsArgumentExactMatch	Specifies whether the string specified for the Argument property must be an exact match or a partial match.
LocalOwner	Gets or sets the local user name or group name to match to allow the use of this Windows application right.
OwnerDN	Specifies the distinguished name of the Active Directory user or group who is the file owner to match to identify the Windows application associated with this right.
OwnerSid	Specifies the security identifier of the Active Directory user or group who is the file owner to match to identify the Windows application associated with this right.
OwnerType	Gets or sets the type of owner to match to allow the use of this Windows application right.
Path	Gets or sets the path to the executable to match to identify the Windows application associated with this right.
ProductName	Gets or sets the product name to match to identify the Windows application associated with this right.
ProductNameMatchOption	Specifies whether the string specified for the ProductName property must be an exact match or a partial match.
ProductVersion	Gets or sets the product version to match to identify the Windows application associated with this right.
ProductVersionMatchOption	Specifies whether the version must be equal to, earlier than or equal to, or later than or equal to the version specified for the ProductVersion property.
Publisher	Gets or sets the publisher name to match to identify the Windows application associated with this right.
PublisherMatchOption	Specifies whether the publisher must be an exact match, partial match, start with, or end with the string specified for the Publisher property.
RequireAdministrator	Specifies whether the Windows application associated with this right requires an administrative user account.
SerialNumber	Gets or sets the volume serial number to match to identify the Windows application associated with this right.
SerialNumberMatchOption	Specifies whether the volume serial number must be an exact match, partial match, start with, or end with the string specified for the SerialNumber property.

Discussion

A Windows application right enables a user to run a Windows application with the privileges of another user or as a member of an Active Directory or built-in group. For example, you can use a Windows application right to give a standard Windows user elevated privileges to run an database management application as a database administrator. You can define the criteria to use to identify the Windows application associated with an application right using the WindowsApplicationCriteria properties.