Appendix A: Filter Rule Conditions and Examples

Filters give administrators the added flexibility of conditionally applying configuration settings. Filters allow you to provision resources based on a variety of conditions such as user group or username. For example, you might want to map drives to users based on the department in which they work. ProfileUnity also allows users to create context-aware filters that provision resources based on the location of your user.

As mentioned in the Utilizing Filter Management section in this guide, filters can have multiple filter rules. These rules are made up of a Condition, Match, and Value triplet. The following table lists the conditions to choose from and some examples of how to use them.

Filter Rule Condition Description
AD User Group Membership Tests for user membership in specified user group.

Example
  • Condition: AD User Group Membership
  • Match: Is (Exactly)
  • Value: Accounting
Returns true for users that are members of the Accounting group.
AD User Primary Group Tests a value against user’s assigned Primary Group.

Example
  • Condition: AD User Primary Group
  • Match: Is (Exactly)
  • Value: Domain Users
Returns true for users with Domain Users assigned as the Primary Group.
Azure User Group Membership Tests for user membership in specified user group.

Example
  • Condition: Azure User Group Membership
  • Match: Is (Exactly)
  • Value: Accounting  
Returns true for users that are members of the Accounting group.
Machine Group Membership Tests for membership in the specified machine group.

Example
  • Condition: Machine Group Membership
  • Match: Is (Exactly)
  • Value: Accounting
Returns true for machines that are members of the Accounting group.
Username Tests a value against a user’s logon name.

Example
  • Condition: Username
  • Match: Is (Exactly)
  • Value: GPBurdell
Returns true if the user’s logon name is GPBurdell.
IP Address Tests a value against the IP address assigned to the client machine. If multiple IP addresses are assigned to the client, the first four IP addresses are tested.

Example
  • Condition: IP Address
  • Match: Is (Exactly)
  • Value: 192.168.1.1
Returns true if the client machine has IP Address 192.168.1.1.

Example
  • Condition: IP Address
  • Match: Begins With
  • Value: 10.1
Returns true if the first two octets of the client IP Address is 10.1.

Example
  • Condition: IP Address
  • Match: Range
  • Value: 192.168.1.1-192.168.1.10
Returns true if the client machine has IP Address within the range of 192.168.1.1 through 192.168.1.10.
Host Name Tests value against the fully qualified TCP/IP hostname.

Example
  • Condition: Host Name
  • Match: Is (Exactly)
  • Value: atl-001.xyz.com
Returns true if the client machine has atl-001.xyz.com assigned as the TCP/IP hostname.
Computer Name Tests a value against the NetBIOS computer name.

Example
  • Condition: Computer Name
  • Match: Is (Exactly)
  • Value: ATL-001
Returns true if the client machine is named ATL-001.
MAC Address Tests a value against the address of the network adapter.

Example
  • Condition: MAC Address
  • Match: Is (Exactly)
  • Value: 00306E053085
Returns true if the client’s network adapter has the address 00306E053085.

Example
  • Condition: MAC Address
  • Match: Begins With
  • Value: 00306E
Returns true if the client’s network adapter has an address that begins with 00306E. Since the first six digits of a MAC address identify the vendor, this filter would return true for network adapters manufactured by Hewlett Packard.
Domain Tests a value against the domain the client machine is a member of.

Example
  • Condition: Domain
  • Match: Is (Exactly)
  • Value: XYZ
Returns true if the client machine is a member of the domain or workgroup XYZ.
Logon Domain Tests a value against the domain the user is logged on to.

Example
  • Condition: Logon Domain
  • Match: Is (Exactly)
  • Value: ABC
Returns true if the user is logged on to domain ABC.
Logon Server Tests a value against the name of the logon server.

Example
  • Condition: Logon Server
  • Match: Is (Exactly)
  • Value: ADC01
Returns true if the server named ADC01 processed the user’s logon.
Site Tests a value against the name of the Active Directory site the client machine resides in.

Example
  • Condition: Site
  • Match: Is (Exactly)
  • Value: Default-First-Site-Name
Returns true if the client machine resides in site Default-First-Site-Name.
TS Client Name Tests a value against the NetBIOS name of the client machine connecting to the terminal server.

Example
  • Condition: TS Client Name
  • Match: Is (Exactly)
  • Value: ATL-001
Returns true if the client machine connecting to the terminal server is named ATL-001.
TS Session Name Tests a value against the session name assigned to the client machine connecting to the terminal server.

Example
  • Condition: TS Session Name
  • Match: Is (Exactly)
  • Value: RDP-Tcp#48
Returns true if the client machine connecting to the terminal server is assigned session name RDP-Tcp#48.

Example
  • Condition: TS Session Name
  • Match: Begins With
  • Value: RDP
Returns true for all client machines connecting to the terminal server via the RDP protocol.

Example
  • Condition: TS Session Name
  • Match: Begins With
  • Value: ICA
Returns true for all client machines connecting to the terminal server via the ICA protocol.
OU User Tests a value against the name of the Active Directory OU the user's account resides in.

Example
  • Condition: OU User
  • Match: Is (Exactly)
  • Value: OU=Test,DC=xyz,DC=com
Returns true if the user's account resides in OU=Test,DC=xyz,DC=com.
OU Computer Tests a value against the name of the Active Directory OU the client machine resides in.

Example
  • Condition: OU Computer
  • Match: Contains
  • Value: OU=Atlanta
Returns true if the OU the client machine resides in contains OU=Atlanta.
View Client Name Tests a value against the name of the client machine connecting to the VMware Horizon session.

Example
  • Condition: View Client Name
  • Match: Is (Exactly)
  • Value: ATL-001
Returns true if the client machine connecting to the VMware Horizon session is named ATL-001.
OS Architecture Tests a value against OS Architecture. OS Architecture is 32 for 32-bit OS and 64 for 64-bit OS.

Example
  • Condition: OS Architecture
  • Match: Is (Exactly)
  • Value: 32
Returns true if the client machine is running 23-bit OS.
View Client IP Tests a value against the IP address of the client machine connecting to the VMware Horizon session.

Example
  • Condition: View Client IP
  • Match: Begins With
  • Value: 192.168.0
Returns true if the client machine connecting to the VMware Horizon session has an IP address that begins with 192.168.0.
View Client MAC Tests a value against the MAC address of the client machine connecting to the VMware Horizon session.

Example
  • Condition: View Client MAC
  • Match: IS (Exactly)
  • Value: 88-9F-FA-8E-63-EB
Returns true if the client machine connecting to the VMware Horizon session has MAC address 88-9F-FA-8E-63-EB.
View Client Protocol Tests a value against the display protocol used by the client machine connecting to the VMware Horizon session.

Example
  • Condition: View Client Protocol
  • Match: IS (Exactly)
  • Value: PCOIP
Returns true if the client machine connecting to the VMware Horizon is using the PCOIP protocol.
View Client Type Tests a value against the client type of the machine connecting to the VMware Horizon session.

Example
  • Condition: View Client Type
  • Match: IS (Exactly)
  • Value: Windows
Returns true if the client machine connecting to the VMware Horizon is running Windows.
View User Domain Tests a value against the domain name of the user connecting to the VMware Horizon session.

Example
  • Condition: View User Domain
  • Match: IS (Exactly)
  • Value: LWL
Returns true if the domain name of the user connecting to the VMware Horizon session is LWL.
View User Name Tests value against the username of the user connecting to the VMware Horizon session.

Example
  • Condition: View User Name
  • Match: IS (Exactly)
  • Value: GBurdell
Returns true if the username of the user connecting to the VMware Horizon session is GBurdell.
View Machine Domain Tests value against the domain name of the machine connecting to the VMware Horizon session.

Example
  • Condition: View Machine Domain
  • Match: IS (Exactly)
  • Value: EXAMPLE
Returns true if the client machine connecting to the VMware Horizon is a member of domain EXAMPLE.
Environment Variable Tests environment variables. This selection required multiple values. The | (pipe) character should be used as a separator.

Example
  • Condition: Environment Variable
  • Match: Is (Exactly)
  • Value: test|1234
Returns true if the environment variable %test% equals 1234.
Registry Value Tests registry values. This selection required multiple values. The | (pipe) character should be used as a separator.

Example
  • Condition: Registry Value
  • Match: Is (Exactly)
  • Value: HKEY_CURRENT_USER\Software\Liquidware Labs\Example|1234
Returns true if the registry value HKEY_CURRENT_USER\Software\Liquidware Labs\Example equals 1234.
Registry Value Exists Tests if registry value exists.

Example
  • Condition: Registry Value Exists
  • Match: Is (Exactly)
  • Value: HKEY_CURRENT_USER\Software\Acro Software Inc\CPW\Data1
Returns true if the registry value HKEY_CURRENT_USER\Software\Acro Software Inc\CPW\Data1 exists.
Registry Key Exists Tests if a registry key exists.

Example
  • Condition: Registry Key Exists
  • Match: Is (Exactly)
  • Value: HKEY_CURRENT_USER\Software\Liquidware Labs\MyKey
Returns true if the registry key HKEY_CURRENT_USER\Software\Liquidware Labs\MyKey exists.
File Tests a file. This selection requires multiple values. The | (pipe) character should be used as a separator.

Example
  • Condition: File
  • Match: Is (Exactly)
  • Value: C:\|test.txt
Returns true if a file with the name test.txt exists in the C:\ path.
Directory Tests the directory. This selection requires multiple values. The | (pipe) character should be used as a separator.

Example
  • Condition: Directory
  • Match: Is (Exactly)
  • Value: C:\|windows
Returns true if a directory with the name windows exists in the C:\ path.
ICA Client Address Tests the ICA client address.

Example
  • Condition: ICA Client Address
  • Match: Is (Exactly)
  • Value: 192.168.1.1
Returns true if ICA client address is 192.168.1.1.
ICA Client Name Tests the ICA client name.

Example
  • Condition: ICA Client Name
  • Match: Is (Exactly)
  • Value: MachineName-PC
Returns true if ICA client name is MachineName-PC.
Service Exists Tests if a service exists.

Example
  • Condition: Service Exists
  • Match: Is (Exactly)
  • Value: SSDP Discovery
Returns true if a service named SSDP Discovery exists.
Service Running Tests if a service is running.

Example
  • Condition: Service Running
  • Match: Is (Exactly)
  • Value: SSDP Discovery
Returns true if a service named SSDP Discovery is running.
Process Running Tests if a process is running.

Example
  • Condition: Process Running
  • Match: Is (Exactly)
  • Value: notepad.exe
Returns true if a process named notepad.exe is running.
Day of Week / Time of Day (For use with the English version of the Client only) Tests for a particular time block. Enter the Value as a “Day|Time” pair separated by a vertical line or pipe. Use short day names: Sun, Mon, Tue, Wed, Thu, Fri, or Sat. The time should be specified using a 24-hour clock with hours from 0 to 23.

Example
  • Condition: Day of Week / Time of Day
  • Match: Is (Exactly)
  • Value: Mon|9:30-10:00, Tue|9-18:31, Wed|12-13
Returns true if Monday from 9:30am to 10:00am, Tuesday from 9:00am to 6:31pm, and Wednesday from 12:00pm to 1:00pm.
LDAP Attribute Tests for the value of an Active Directory attribute. Enter Value as an “Attribute|Value” pair separated by a vertical line or pipe.

Example
  • Condition: LDAP Attribute
  • Match: Is (Exactly)
  • Value: department|engineering
Returns true if the AD value of the department attribute is set to engineering.