chres Command—Modify Windows Resources

selang Reference Guide › selang Commands › selang Commands in the Native Windows Environment › chres Command—Modify Windows Resources

chres Command—Modify Windows Resources

Valid in the native Windows environment

Use the chres, editres, and newres commands to work with resource records that belong to a CA ControlMinder class in the Windows environment. These commands are identical in structure and only vary in the following way:

The chres command modifies one or more resources.
The editres command creates or modifies one or more resources.
The newres command creates one or more resources.

Note: This command also exists in the AC environment but operates differently.

This command has the following formats:

{{chres|cr}|{editres|er}|{newres|nr}} className resourceName \

[comment(string)|comment‑] \
[defaccess(accessValue)] \
[dword(integer)|string(string)|binary(hexastring)|multistring(string)] \
[location(string)|location()] \
[maxusers(integer)] \
[owner(userName|groupName)] \
[share_name(string)|sharename-]

{{chres|cr}|{editres|er}|{newres|nr}} \

DOMAIN resourceName \
[computer(workstationName)|computer‑(workstationName)] \
[domainpwd(connectPassword)] \
[trusted(domainName)|trusted‑(domainName)]

binary(hexastring)

Specifies the value of a registry key when it is a hexadecimal.

className

Specifies the name of the class to which resourceName belongs.

For the newres command, valid values are: REGKEY, REGVAL, OU, and SHARE. For the chres and editres commands, valid values are: COM, DISK, DOMAIN, FILE, PRINTER, REGKEY, REGVAL, SERVICE, DEVICE, SESSION, OU, and SHARE.

comment(string)

Adds a comment string to the resource record. If you previously added a comment string to the resource record, the new string specified here replaces the existing string. This parameter is valid for SHARE and PRINTER resources only.

computer(workstationName)|computer‑(workstationName)

Specifies the name of the workstation you are adding to the domain, or, when a minus sign precedes the argument, the name of the workstation you are removing from the domain. This parameter can only be used with DOMAIN resources. You can specify this parameter only with the chres or editres command.

defaccess(accessValue)

Specifies the access authority for the Native security built-in group Everyone. All the system users are members of the Everyone group. Providing access to the Everyone group covers all the potential anonymous users in addition to all authenticated users.

Note: Defaccess for an object defined in the CA ControlMinder environment has a different meaning; the default access authority is the authority granted to any accessor who is not in the resource's CA ControlMinder list who requests access to the resource. The default access also applies to users not defined in CA ControlMinder.

The defaccess parameter applies only to NTFS file systems.

domainpwd(connectPassword)

Specifies the password an administrator must enter when changing trust relationships.

This parameter can only be used with DOMAIN resources. You can specify this parameter only with the chres or editres command.

dword(integer)

Specifies the value of a registry key when it is an integer.

gen_prop(propertyName)

Specifies the property for the OU class.

This parameter is valid for the OU class only.

gen_value(valueName)

Specifies the property value for the OU class.

This parameter is valid for the OU class only.

location(string)

Indicates the location of a printer. Use ( ) with blanks to remove this property.

This parameter is valid for PRINTER resources only.

maxusers(integer)

Specifies the maximum number (integer) of users that can connect to a shared directory at one time.

This parameter is valid for SHARE resources only.

multistring(string)

Specifies the value of a registry key when it is a multistring.

owner(userName|groupName)

Assigns a user or group as the owner of the resource record. The owner of the resource record has unrestricted access to the resource. The owner of the resource is always permitted to update and delete the resource record. For more information, see the Endpoint Administration Guide for Windows.

For FILE or SHARE records on a FAT file system, you may not specify the owner parameter. This parameter is also not valid for DEVICE, DOMAIN, OU, PROCESS, REGVAL, SERVICE, and SESSION resources.

resourceName

The name of the resource record to modify or add. When changing or adding more than one resource, enclose the list of resource names in parentheses and separate the resource names with a space or a comma. At least one resource name must be specified.

CA ControlMinder processes each resource record independently in accordance with the specified parameters. If an error occurs while processing a resource, CA ControlMinder issues a message and continues processing with the next resource in the list.

share_name(shareName)|share_name-

Identifies the share point for a printer.

This parameter is valid for PRINTER resources only.

string(string)

Specifies the value of a registry key when it is a string.

trusted(domainName) | trusted‑(domainName)

Specifies the name of the domain you are adding to trusted domains, or, when a minus sign precedes the argument, the name of the domain you are untrusting. This parameter can only be used with DOMAIN resources. You can specify this parameter only with the chres or editres command.

More information:

chres Command—Modify Resource Records

showres Command—Display Native Resource Properties

rmres Command—Delete a Windows Resource