I just wanted to confirm something...We want to monitor the usage of Adobe Acrobat in our enterprise. We have different versions (from 7 to 11). I ran a report on the exe and there multiple file versions exe per major versions (ie : version 9 has 9.3.0.148, 9.3.2.163, 9.3.3.177, 9.4.6.252, 9.5.0.270 and a few more...!)

What I did is create a rule that monitors Acrobat.exe with a FileVersion of *. This report gives me the amount of users that opened Acrobat, regardless of the version. I ran the report and the count is about 100.

I then created one rule per major version :

Name : Acrobat Pro 7
Exe : Acrobat.exe
File Version : 7.?

Name : Acrobat Pro 8
Exe : Acrobat.exe
File Version : 8.?

...and so on

These rules yield no results but it should have since 100 users opened Acrobat.exe and I have versions 7 to 11... ?

So I was wondering if I am using the "?" correctly or there is something I am missing ?

Thanks!

Hi Pierre,

Guess you have referred this link: http://technet.microsoft.com/en-us/library/bb633043.aspx

You can use the wildcard character (*) to represent any string of characters or the wildcard character (?) to represent any single character.

You have to use (*) for more than one character. Use the File version as 7.*, 8.*, 9.*, so on...

Have you tried with an asterisk (*) instead?

A question (?) typically means any one single character. An asterisk means zero or more of any characters.

Thus 9.? will only match 9.1, 9.2, 9.3 ... but not  9.3.2.163. To match that, you should use 9.*. Note that you may in fact have to use 9.*.*.* because versions are a special type of string/number.

Oh! I didn't get the */? properly then!
I'll give it a try with 7.*, 8.* to see if it works...otherwise I'll try 7.*.*.* or 7.*.* and let you know!
Thanks!!!

Yes, confirmed, it worked with only 7.*, 8.*, etc..
Thanks for your help!