The query wizard is a powerful and easy-to-use front end to the robust SecurityExpressions query engine. The wizard allows queries of all types to be easily and quickly run. Queries can include lists of files, file permissions, registry keys, users and groups and other information on systems that meet the needed criteria. Where expressions based rules are powerful and flexible for system security policy, queries are powerful when requiring lists of specific objects across a wide range of systems.

In addition to the creation of custom queries, there are many built-in queries including:

• Files or registry keys that are owned by a particular owner

• Files or registry keys created or modified during the last number of days or hours

• All files or registry keys to which a particular user has access

• Files or registry keys with unknown or deleted users in the access control list

• Find a specific value in the registry

• Users with blank, clear text or expired passwords

• Users that haven't changed their password in a number

• Users that haven't logged in over some period of time or never logged in

• Users who are directly or indirectly members of the Administrator's group

• Users with local logon rights to a server

• Users with dial-in privileges

• Groups with a specific, administrative, guest or disabled member

• Groups with identical memberships