This example walks through the desired configuration management compliance evaluation process for an application configuration item to demonstrate how the compliance of a configuration baseline is evaluated. It also demonstrates how the compliance evaluation results of the same configuration item can change, according to the configuration of the computers and the selected configuration baseline rule.
Example Configuration
A desired configuration management application configuration item has been created with the following configuration:
Name: Office on Windows XP Computers.
Applicability: Windows XP only.
Detection method: Windows Installer using Office Product code and Version number.
Objects and Settings: Various
The application configuration item is added to a configuration baseline using one of three possible configuration baseline rules. The configuration baseline is then assigned to the All Systems collection, which contains a total of four computers that are running either Microsoft Windows XP or Windows Server 2003.
The following table displays how the computers in the All Systems collection are configured with regard to the following:
- Their operating system platform
(Applicability)
- Whether Office XP is installed
(Detected)
- Whether Office XP is configured
correctly (Compliance)
Computer | Operating System Platform (Applicability) | Office XP Installed (Detected) | Office XP Configured Correctly (Compliance) |
---|---|---|---|
A |
Windows Server 2003 platform |
Office XP is installed. |
Office XP is configured incorrectly. |
B |
Windows XP platform |
Office XP is not installed. |
Office XP is not installed. |
C |
Windows XP platform |
Office XP is installed. |
Office XP is configured incorrectly. |
D |
Windows XP platform |
Office XP is installed. |
Office XP is configured correctly. |
The following sections display the desired configuration management compliance evaluation results that this example configuration item will produce when it is added in turn to the following configuration baseline rules:
- These applications and general
configuration items are required and must be properly
configured.
- If these optional application
configuration items are detected, they must be properly
configured.
- These application configuration items must
not be present.
Compliance Results for a Required Application
If the application configuration item defined earlier is added to the configuration baseline rule These applications and general configuration items are required and must be properly configured, the following table displays the desired configuration management compliance results for the computers defined in the previous table.
Computer | Actual Compliance | Compliance with Configuration Baseline Rule |
---|---|---|
A |
Not applicable |
Compliant |
B |
Not detected |
Not compliant |
C |
Non-compliant |
Not compliant |
D |
Compliant |
Compliant |
Compliance Results for an Optional Application
If the application configuration item defined earlier is added to the configuration baseline rule If these optional application configuration items are detected, they must be properly configured, the following table displays the desired configuration management compliance results for the computers defined in the first table. The compliance difference from the previous section is that computer B is now compliant with this configuration baseline.
Computer | Actual Compliance | Compliance with Configuration Baseline Rule |
---|---|---|
A |
Not applicable |
Compliant |
B |
Not detected |
Compliant |
C |
Non compliant |
Not compliant |
D |
Compliant |
Compliant |
Compliance Results for a Prohibited Application
If the application configuration item defined earlier is added to the configuration baseline rule These application configuration items must not be present, the following table displays the desired configuration management compliance results for the computers defined in the first table. The compliance difference from the previous section is that computer D is not compliant with this configuration baseline.
Computer | Actual Compliance | Compliance with Configuration Baseline Rule |
---|---|---|
A |
Not applicable |
Compliant |
B |
Not detected |
Compliant |
C |
Non-compliant |
Not compliant |
D |
Compliant |
Not Compliant |
See Also
Tasks
How to Assign Configuration Baselines in Desired Configuration ManagementHow to Assign Configuration Categories to Configuration Items and Configuration Baselines in Desired Configuration Management
How to Create a New Configuration Item in Desired Configuration Management
Concepts
About Compliance and Compliance Information in Desired Configuration ManagementAbout Configuration Baselines in Desired Configuration Management
About Configuration Items in Desired Configuration Management