KACE Product Support

To Create a method of checking what definition version of Microsoft Forefront Antivirus is running on your devices use the following method;


Firstly go to Inventory>Software and Create a new software inventory.
Use a custom inventory rule with the following values;

RegistryValueReturn(HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft Forefront\Client Security\1.0\AM\Signature Updates, ASSignatureVersion, REG_SZ)
RegistryValueReturn(HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft Forefront\Client Security\1.0\AM\Signature Updates, AVSignatureVersion, REG_SZ)
see image 1


Click save and once a machine checks in you will get this custom inventory report in image 2


As machines check in they will populate this field with the 2 versions AS and AV.
Now you need to create a report to make use of this field.
Go to reports>Select New report
Assign a title and category and if you wish a description.
Report Topic select “Computer”
Click Next
Click Computer Identity information and click the checkbox for “System Name” then select the “Custom Fields” and tick the check box
“Microsoft Forefront Definition Version” (or whatever you called the custom inventory).
Image 3

Click next

Then click on next again

Then save
image 4

You then need to edit the report again and modify the SQL query.
Where you see “DATE_FIELD_VALUE” replace the DATE with STR so it is “STR_FIELD_VALUE”
Save this query
The entire Query should look similar to

SELECT MACHINE.NAME AS SYSTEM_NAME,(SELECT MACHINE_CUSTOM_INVENTORY.STR_FIELD_VALUE FROM MACHINE_CUSTOM_INVENTORY WHERE MACHINE_CUSTOM_INVENTORY.ID=MACHINE.ID AND MACHINE_CUSTOM_INVENTORY.SOFTWARE_ID=7222) AS MACHINE_CUSTOM_INVENTORY_2_7222 FROM MACHINE WHERE ((1 in (select 1 from MACHINE_CUSTOM_INVENTORY where MACHINE.ID = MACHINE_CUSTOM_INVENTORY.ID and MACHINE_CUSTOM_INVENTORY.SOFTWARE_ID = 7222 and MACHINE_CUSTOM_INVENTORY.STR_FIELD_VALUE is not null)) ) ORDER BY SYSTEM_NAME

You will have a few different values because your software ID will be different.

Run and view your report for the results.