Browse Docs
ONLINE DOCUMENTATION

Applications checks in Trust Profile

Application checks look at the list of installed programs on a Windows computer, the same list you see in Settings > Apps > Installed apps or Control Panel > Programs and Features. Use them to require that a product is installed, or that it is at or above a minimum version.

Supported platforms: [Windows]

General Notes

  • Both 64-bit and 32-bit installations are found.

  • Only programs installed for all users (machine-wide) are visible. Programs installed only for a single user profile are not seen by these checks.

  • Publisher and Application are glob patterns and are not case sensitive. A value without * or ? must match the name exactly.

  • Leave Publisher empty to accept any publisher. Fill it in when the application name is generic enough to be shared by other products.

  • The installed programs list is refreshed at most every 15 seconds, so a program that was just installed or removed may take a moment to be seen.

  • If several installed entries match (for example a 32-bit and a 64-bit copy), one matching entry is enough for the check to pass.

trust profile application check

Application is Installed

Platforms

[Windows]

Comparison

None

Fields

Publisher (optional), Application (required)

Passes when an installed program matches the application name and, if given, the publisher.

Installers often add extra text to the name, such as the architecture or language. Use * to allow for it.

Table 1. Examples
Publisher Application

(empty)

Mozilla Firefox* (matches Mozilla Firefox (x64 en-US))

CrowdStrike, Inc.

CrowdStrike Windows Sensor

Microsoft*

Microsoft Intune Management Extension*

Application Version

Platforms

[Windows]

Comparison

equals, does not equal, is less than, is less than or equal, is greater than, is greater or equal

Fields

Publisher (optional), Application (required), Version (required)

Compares the version of an installed program with the version you enter. Versions are compared number by number, so 1.10 is higher than 1.9.

Use is greater or equal to enforce a minimum patch level. For example, Application Google Chrome*, is greater or equal, Version 128.0.6613.84.

How missing and unusual entries behave

  • If the application is not installed, the check fails for every comparison, does not equal included. If you mean not installed, or installed but older than X, build it with a group set to Match any check. Add NOT Application is Installed and Application Version is less than X. Match applies to the whole platform group, so this works best when these two are the only checks in the group.

  • An installed entry that records no version counts as older than any real version. It passes is less than and never passes is greater or equal.

Tip
 To see the exact name, publisher and version Windows records, run this in PowerShell: Get-ItemProperty HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*, HKLM:\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\* | Select-Object DisplayName, Publisher, DisplayVersion
Secure Industries, Inc 101 Avenue of The Americas, Floor 9 New York, NY 10013