KB17389 - [Host Checker] How to enforce domain membership with Host Checker Policy

This article describes how to enforce a domain membership with a Host Checker Policy. Procedures for creating a Host Checker Policy based on the Domain Registry setting in different versions of Windows are given.

 

One way to identify a corporate PC is to create a Host Checker policy based on the Domain Registry setting.

Perform the following steps:

1. Select Endpoint Security > Host Checker > New
2. ​Select Policy Name > Continue
3. Under Rule Settings: Custom: Registry Setting > Add

Criteria:
Registry Root Key: HKEY_ LOCAL_MACHINE
Registry Subkey: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Name: CachePrimaryDomain
Type: String
Value: xxxxxxxxxxxxxxx

Criteria:
Registry Root Key: HKEY_ LOCAL_MACHINE
Registry Subkey: SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\History
Name: MachineDomain
Type: String
Value: xxxxxxxxxxxxxxx