WindowsApplicationCriteria

This class represents the match criteria for identifying a Windows application right.

Syntax

public interface IWindowsApplicationCriteria

Methods

The WindowsApplicationCriteria class provides the following method.

Method	Description
`Validate`	Determines whether the match criteria is valid.

Properties

The WindowsApplicationCriteria class provides the following match criteria properties that correspond to the fields displayed on the Match Criteria tab in Access Manager:

Property	Description
`Argument`	Gets or sets the arguments allowed with this Windows application right.
`CompanyName`	Gets or sets the company name to match to identify the Windows application associated with this right.
`CompanyNameMatchOption`	Specifies whether the string specified for the CompanyName property must be an exact match or a partial match.
`Description`	Gets or sets the description for the match criteria defined for a specific application right.
`FileDescription`	Gets or sets the file description to match to identify the Windows application associated with this right.
`FileDescriptionMatchOption`	Specifies whether the string specified for the FileDescription property must be an exact match or a partial match.
`FileHash`	Gets or sets the encrypted file hash to match to identify the Windows application associated with this right. The file hash is generated using the SHA-1 encryption algorithm, which is FIPS-compliant.
`FileName`	Gets or sets the file name to match to identify the Windows application associated with this right.
`FileType`	Gets or sets the type of executable file to match to identify the Windows application associated with this right.
`FileVersion`	Gets or sets the file version to match to identify the Windows application associated with this right.
`FileVersionMatchOption`	Specifies whether the version must be equal to, earlier than or equal to, or later than or equal to the version specified for the FileVersion property.
`IsArgumentCaseSensitive`	Specifies whether arguments for the Argument property are case-sensitive.
`IsArgumentExactMatch`	Specifies whether the string specified for the Argument property must be an exact match or a partial match.
`LocalOwner`	Gets or sets the local user name or group name to match to allow the use of this Windows application right.
`OwnerDN`	Specifies the distinguished name of the Active Directory user or group who is the file owner to match to identify the Windows application associated with this right.
`OwnerSid`	Specifies the security identifier of the Active Directory user or group who is the file owner to match to identify the Windows application associated with this right.
`OwnerType`	Gets or sets the type of owner to match to allow the use of this Windows application right.
`Path`	Gets or sets the path to the executable to match to identify the Windows application associated with this right.
`ProductName`	Gets or sets the product name to match to identify the Windows application associated with this right.
`ProductNameMatchOption`	Specifies whether the string specified for the ProductName property must be an exact match or a partial match.
`ProductVersion`	Gets or sets the product version to match to identify the Windows application associated with this right.
`ProductVersionMatchOption`	Specifies whether the version must be equal to, earlier than or equal to, or later than or equal to the version specified for the ProductVersion property.
`Publisher`	Gets or sets the publisher name to match to identify the Windows application associated with this right.
`PublisherMatchOption`	Specifies whether the publisher must be an exact match, partial match, start with, or end with the string specified for the Publisher property.
`RequireAdministrator`	Specifies whether the Windows application associated with this right requires an administrative user account.
`SerialNumber`	Gets or sets the volume serial number to match to identify the Windows application associated with this right.
`SerialNumberMatchOption`	Specifies whether the volume serial number must be an exact match, partial match, start with, or end with the string specified for the SerialNumber property.

Discussion

A Windows application right enables a user to run a Windows application with the privileges of another user or as a member of an Active Directory or built-in group. For example, you can use a Windows application right to give a standard Windows user elevated privileges to run an database management application as a database administrator. You can define the criteria to use to identify the Windows application associated with an application right using the WindowsApplicationCriteria properties.