DEX policies for Windows devices

reference brazil Updated Sep 10, 2026 3 min read dex-policies-windows.md
Raw file servicenow.com

Policy reference for DEX monitoring on Windows devices. The policies define the check instances, frequencies, and parameters for application, network, and device monitoring.

To fetch the complete playbook data for a Windows device, the Agent Client Collector (ACC) must run as a local system account. For more information about how to set up the ACC service as a local system account, see Run ACC as a local system account user.

Application policies for Windows

DEX provides the following policies for applications.

Check instance

Description

Frequency

Historical or latest

Check instance parameters*

os.win.check-app-historical

Collects the application metrics in the Windows device and sends the metric data to Metric Base.

5 minutes

Historical

cpu_usage, memory_usage, uptime, last_access_time, crashes, io_usage_read, io_usage_write, is_running, freezes,zscaler_service_status

os.win.check-app-sccm-latest

Collects application-specific metrics for the Microsoft System Center Configuration Manager app on the Windows device.

24 hours

Latest

Not applicable

Important: * DEX Windows Apps Metrics with the uptime check instance parameter only runs with the Local System account.

## Application Network Experience policies for Windows

Before configuring the following policies, make sure that the Agent Client Collector is version 4.2 or later to display the network path for applications. Additionally, the DEX browser extension plugin must be installed and must be version 2.5.0 or later to fetch network metrics for web applications.

Note: These policies have the following limitations:

  • A tracert command is used to get the network path.
  • Application Network Experience (ANE) doesn't work for a path in the domain URL, for example, <domain>/<path>

DEX provides the following policies for applications.

Check instance Description Frequency Historical or latest Check instance parameters
os.win.check-app-dom-network-historical Collects Windows installed apps network monitoring metrics like latency, packet loss, and jitter and sends monitoring data to Metric Base and the ServiceNow instance. 10 minutes Historical domain_network_details
os.win.check-web-app-dom-net-historical Collects Windows Web apps network monitoring metrics like latency, packet loss, and jitter and sends monitoring data to Metric Base and the ServiceNow instance. 10 minutes Historical domain_network_details
os.win.check-app-dom-network-latest Collects Windows Web apps network monitoring metrics like latency, packet loss, and jitter and sends monitoring data to Metric Base and the ServiceNow instance. 30 minutes Latest source_details, domain_network_route_details

Device policies for Windows

DEX provides the following policies for devices.

Check instance

Description

Frequency

Historical or latest

Check instance parameters*

os.win.check-system-metrics-latest

Collects Windows device metrics and sends the metric data to the ServiceNow instance.

24 hours

Latest

uptime, logged_in, antivirus_enabled, firewall_enabled, disk_details, device_details, battery_details, bsod_details, cpu_details, os_details, power_plan, stability_index, pending_updates, network_details, bitlocker_details, user_profiles, antimalware_details, hard_drive_status, peripheral_devices_details, cpu_usage, memory_details, device_events, last_access_time, os_setup_details,bios_details, network_connection_profiles, network_adapter_details,gpu_usage, gpu_vram_usage,boot_details

Important: * DEX Windows Device Metrics with the following check instance parameters runs only with a Local System account: energy_consumption, bitlocker_details, last_access_time, pending_updates, user_profiles.

os.win.check-system-metrics-historical

Collects Windows device metrics and sends the metric data to MetricBase.

30 minutes

Historical

network_connection_profiles

os.win.check-system-metrics-historical

Collects Windows device metrics and sends the metric data to MetricBase.

5 minutes

Historical

disk_usage, io_usage_write, io_usage_read,cpu_usage, battery_charge_percentage, energy_consumption, memory_details,uptime, disk_details, cpu_performance_details, crashes, power_consumption, wifi_transmit_rate, wifi_receive_rate, wifi_signal_strength

os.win.check-process-data

Collects data for running Windows processes and sends the data to the ServiceNow instance.

24 hours

Not applicable

Not applicable

os.win.check-sys-compliance-historical

Collects Windows device metrics and sends the metric data to the ServiceNow instance.

5 minutes

Historical

Not applicable

os.win.check-sys-compliance-latest

Collects Windows device metrics and sends the metric data to the ServiceNow instance.

24 hours

Latest

Not applicable

os.win.check-system-executables-latest

Collects all the executables present on all volumes of a Windows device.

24 hours

Latest

config_file_read

os.win.check-system-registry-latest

Gets registry data on a Windows device.

24 hours

Latest

config_file_read

|Check instance|Description|Frequency|Historical or latest|Check instance parameters| |--------------|-----------|---------|--------------------|-------------------------| |os.win.check-system-custom-query-on-chan|Gets a logged-in user's data on a Windows device whenever there’s a change.|60 seconds|Latest|query,query\_sys\_id, query\_type|
Check instance Description Frequency Historical or latest Check instance parameters
os.all.check.internal.get-device-configu Gets a logged-in user's device configuration whenever there’s a change. 60 seconds Latest Not applicable

Note: If you upgrade the DEX Content Playbook plugin on an instance and encounter unexpected policy update issues, see the Troubleshooting: Policy update issues post DEX plugin upgrade [KB1586917] article in the Now Support knowledge base.

Search documentation
Search document titles and file paths on the brazil branch