Important Notice: On February 29th, this community was put into read-only mode. All existing posts will remain but customers are unable to add new posts or comment on existing. Please feel to join our Community Discord for any questions and discussions.

Meltdown Registry Key Scanner

Hi,

I'm trying to create a custom Dynamic Group that will show me which PCs have the Meltdown registry key need to push out the updates.

The key is:

Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat" Value="cadca5fe-87d3-4b96-b7fb-a231484277cc" Type="REG_DWORD”

 

I've set up a registry scanner, and I've also created a dynamic collection querying that path as well, but no matter what I do, neither returns any results.

Below are screenshots of my config with PDQ and the Registry key on my PC. I've tried the usual restart both PC and server after the key was put in place but it doesnt seem to return anything.

 



Any idea what I'm doing wrong? (I also have Enterprise Mode on both Inv and Deploy)

 

Thanks!

0

Comments

3 comments
Date Votes
  • Ok I figured it out, on the registry scanner, I was doing HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat

     

    Where it needed to be

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat\

     

    That last trialing \ is the difference between key and value, missed that!

    0
  • Good catch. Glad you figured it out.

    0
  • Tony - thanks for the Reg Scanner legwork.

    Here's my Dynamic Collection Export, it's a bit more specific (e.g. Equals rather than Starts With), if that matters to anyone,

     

    -----------Begin Export-----------

    <?xml version="1.0" encoding="utf-8"?>
    <AdminArsenal.Export Code="PDQInventory" Name="PDQ Inventory" Version="14.3.0.0" MinimumVersion="4.0">
    <Collection>
    <ReportDefinition name="Definition">
    <RootFilter name="Filter">
    <Comparison>All</Comparison>
    <Filters type="list">
    <ValueFilter>
    <Table>Registry</Table>
    <Column>Hive</Column>
    <Comparison>Equals</Comparison>
    <Value>HKEY_LOCAL_MACHINE</Value>
    </ValueFilter>
    <ValueFilter>
    <Table>Registry</Table>
    <Column>PathName</Column>
    <Comparison>Equals</Comparison>
    <Value>SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat</Value>
    </ValueFilter>
    <ValueFilter>
    <Table>Registry</Table>
    <Column>Name</Column>
    <Comparison>Equals</Comparison>
    <Value>cadca5fe-87d3-4b96-b7fb-a231484277cc</Value>
    </ValueFilter>
    <ValueFilter>
    <Table>Registry</Table>
    <Column>Value</Column>
    <Comparison>Equals</Comparison>
    <Value>0</Value>
    </ValueFilter>
    </Filters>
    </RootFilter>
    <ReportDefinitionTypeName>BasicReportDefinition</ReportDefinitionTypeName>
    <Columns type="list">
    <Column>
    <Column>ComputerId</Column>
    <Summary></Summary>
    <Table>Computer</Table>
    <Title></Title>
    </Column>
    </Columns>
    </ReportDefinition>
    <IsDrilldown value="false" />
    <Created>2018-01-05T11:37:48.0000000-05:00</Created>
    <Description></Description>
    <Error></Error>
    <Id value="1036" />
    <ImportedPath>Meltdown Reg Key\Reg Key Present</ImportedPath>
    <Modified>2018-01-05T12:05:19.0000000-05:00</Modified>
    <Name>Reg Key Present</Name>
    <ParentId value="1037" />
    <Path>Meltdown Reg Key\Reg Key Present</Path>
    <TypeName>DynamicCollection</TypeName>
    <Type>DynamicCollection</Type>
    <Children type="list" />
    </Collection>
    </AdminArsenal.Export>

    -----------End Export-----------

    0