Hi,
Scanning .exe files from eg. C:\ will trigger file download from OneDrive if OneDrive file is flagged as on demand (offiline).
I know this approach has pros and cons, but generally is there any possibility of triggering this behaviour? In some cases users want to keep files offline and downloadable only on-demand not to fill their SSDs with large files - not touching the fact why some people may have .exe files on their OneDrive.
Jan 17, 2024 01:16 PM
When the ndtrack inventory gathering process scans .exe file details on Windows, it reads PE file header information from these files. Some of these details are returned in the generated inventory data. I expect if the file content is not physically present on the filesystem, this operation would cause the file to be downloaded.
PE file header information includes details that you can see in the "Details" tab when viewing file properties in Windows explorer. For example, for the ndtrack.exe file itself:
Jan 18, 2024 03:50 AM
Jan 17, 2024 05:01 PM
Hi, @tjohnson1 I am aware of the exclusions, however I am more interested in mechancism that trigger the file Onedrive download, is it MD5 check on offline OneDrive files etc? Users may sync for example their personal OneDrive to any folder eg. D:\xyz or C:\abc if they have permissions to do so, so filtering may not be feasible.
BR, Antti
Jan 18, 2024 02:03 AM - edited Jan 18, 2024 02:15 AM
When the ndtrack inventory gathering process scans .exe file details on Windows, it reads PE file header information from these files. Some of these details are returned in the generated inventory data. I expect if the file content is not physically present on the filesystem, this operation would cause the file to be downloaded.
PE file header information includes details that you can see in the "Details" tab when viewing file properties in Windows explorer. For example, for the ndtrack.exe file itself:
Jan 18, 2024 03:50 AM
Thanks @ChrisG probably this is not something that can be controlled in FNMS in any way, but at least it is good to have explanation for this behaviour.
Jan 18, 2024 04:03 AM