Scenario: We currently allow our users to VPN in from there personal
computers giving them access to terminal server only. But before they can
connect a script detects if their virus scan is up to date and if they are
running WinXP SP2 and if Firewall is enabled.

The Limitation: We are currently only detecting one product and one version
of a virus scan application. So if they are not running this they cannot use
our VPN.

The Desired Result: How does Security Center determine if a system is up to
date? I figure use a script to see what the Security Center reports are
looking at read those and if it says the system is upto date then give
permission to log on to VPN. This will allow for many versions and vendors
to be used instead of just one version of one vendor.

A one track mind: I have been searching and searching, and I have been
looking at the WMI. I have found a script from the scripting guys, but I
don’t think this is valid anymore. Perhaps this has been disabled. Anyone
have an idea how to look to see if a virus def is upto date regardless of
vendor.

Title of script from scripting guys:
'*****
'AvSettings-wmi.vbs
'Author: Peter Costantini, The Microsoft Scripting Guys
'Date: 9/1/04
'Version: 1.0
'This script reads properties of an installed anti-virus product, using WMI.
'root\SecurityCenter:AntiVirusProduct is new on Windows XP Service Pack 2.
'*****

--
Trying to figure it all out, maybe not all but something.