Important Notice: On February 29th, this community was put into read-only mode. All existing posts will remain but customers are unable to add new posts or comment on existing. Please feel to join our Community Discord for any questions and discussions.

Collection to Show Machines where a RegistryValue does not exist

Gary Millar

Updated February 08, 2018 15:04

I have a Registry scanner in place to show what the status of the "EnableLUA" value in the following Registry Key "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System"

It returns 1 for on and 0 for off. However i want to know of machines where the value does not exist as this seems to make the machine think that UAC is still enabled.

Comments

2 comments

Permanently deleted user
February 08, 2018 18:11

I think something like this might work.

0
Gary Millar
February 09, 2018 09:17

Thanks Colby...

It was actually my registry scanner that was the problem. It was looking at the below "Value Name"

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA

Which returns the status of just that key... So i have added an additional scanner to the profile to look at the whole key.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\

That way my Collection query above can see collections where the "Value Name" does not exist.

0