cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
wgknowles
Engaged Sweeper II
I am using the following report to find computers that do not have sophos antivirus installed.
We are seeing false positives on computers that have other errors preventing service enumeration
(e.g. WMI errors, DNS problems)

Is there a good way to modify similar reports so that they won't return these false positives?
First thing that comes to mind would be to modify the where statement with a count > 1

SELECT Computername, Username, Lastseen
FROM dbo.tblComputers
WHERE (Computername NOT IN
(SELECT Computername
FROM dbo.tblServices
WHERE (Caption = 'Sophos Anti-Virus')))
1 REPLY 1
wgknowles
Engaged Sweeper II
Here's what I came up with...
1st (for simplicity) create a new view called web30repErrors

SELECT Computername
FROM dbo.tblerrors
GROUP BY Computername
HAVING (COUNT(Computername) > 0)

Then append any reports having false positives with:
WHERE Computername NOT IN (SELECT Computername FROM dbo.web30repErrors)