This example walks through the desired configuration management compliance evaluation process for an application configuration item to demonstrate how the compliance of a configuration baseline is evaluated. It also demonstrates how the compliance evaluation results of the same configuration item can change, according to the configuration of the computers and the selected configuration baseline rule.

Example Configuration

A desired configuration management application configuration item has been created with the following configuration:

Name: Office on Windows XP Computers.

Applicability: Windows XP only.

Detection method: Windows Installer using Office Product code and Version number.

Objects and Settings: Various

The application configuration item is added to a configuration baseline using one of three possible configuration baseline rules. The configuration baseline is then assigned to the All Systems collection, which contains a total of four computers that are running either Microsoft Windows XP or Windows Server 2003.

The following table displays how the computers in the All Systems collection are configured with regard to the following:

  • Their operating system platform (Applicability)

  • Whether Office XP is installed (Detected)

  • Whether Office XP is configured correctly (Compliance)

Computer Operating System Platform (Applicability) Office XP Installed (Detected) Office XP Configured Correctly (Compliance)

A

Windows Server 2003 platform

Office XP is installed.

Office XP is configured incorrectly.

B

Windows XP platform

Office XP is not installed.

Office XP is not installed.

C

Windows  XP platform

Office XP is installed.

Office XP is configured incorrectly.

D

Windows  XP platform

Office XP is installed.

Office XP is configured correctly.

The following sections display the desired configuration management compliance evaluation results that this example configuration item will produce when it is added in turn to the following configuration baseline rules:

  • These applications and general configuration items are required and must be properly configured.

  • If these optional application configuration items are detected, they must be properly configured.

  • These application configuration items must not be present.

Compliance Results for a Required Application

If the application configuration item defined earlier is added to the configuration baseline rule These applications and general configuration items are required and must be properly configured, the following table displays the desired configuration management compliance results for the computers defined in the previous table.

Computer Actual Compliance Compliance with Configuration Baseline Rule

A

Not applicable

Compliant

B

Not detected

Not compliant

C

Non-compliant

Not compliant

D

Compliant

Compliant

Compliance Results for an Optional Application

If the application configuration item defined earlier is added to the configuration baseline rule If these optional application configuration items are detected, they must be properly configured, the following table displays the desired configuration management compliance results for the computers defined in the first table. The compliance difference from the previous section is that computer B is now compliant with this configuration baseline.

Computer Actual Compliance Compliance with Configuration Baseline Rule

A

Not applicable

Compliant

B

Not detected

Compliant

C

Non compliant

Not compliant

D

Compliant

Compliant

Compliance Results for a Prohibited Application

If the application configuration item defined earlier is added to the configuration baseline rule These application configuration items must not be present, the following table displays the desired configuration management compliance results for the computers defined in the first table. The compliance difference from the previous section is that computer D is not compliant with this configuration baseline.

Computer Actual Compliance Compliance with Configuration Baseline Rule

A

Not applicable

Compliant

B

Not detected

Compliant

C

Non-compliant

Not compliant

D

Compliant

Not Compliant

See Also