Comparing a registry value to the PDQ Inventory computer name

Issue: Computer name in PDQ Inventory is EuropeanSwallow. Kick off a scan, PDQ queries DNS, and connects to the IP associated with that name. Due to a DNS lookup error, PDQ actually connected to KillerRabbit.

To find systems with this issue, I have a custom registry scan to get the computer name from the registry key "HKLM\SYSTEM\CurrentControlSet\Control\ComputerName\ActiveComputerName\ComputerName". I want to compare that value to the computer name PDQ inventory is using. I cannot figure out what variable to use ( $(Computer:TARGET) ???) and how to compare that to the Registry value.

The intent is to try and find computers with a DNS issues, and correct them. I do not control DNS at my company, so I have to provide that group with a list of PC's that appear to have issues

Colby Bouma

June 16, 2020 15:59

>Due to a DNS lookup error, PDQ actually connected to KillerRabbit.

That is an issue that we fixed recently. It is currently available in the Nightly. We used to just rely on Kerberos to verify the computer name, but now the runner verifies the computer name itself.

https://www.pdq.com/downloads/#nightly-builds

>I want to compare that value to the computer name PDQ inventory is using.

I do not believe it is possible to do this with Collections. You could create a Report, but you would have to visually inspect it for anomalies.

Bruce Musgrove

June 16, 2020 16:46

Thank you Sir. That gives me exactly what I need.

June 16, 2020 17:13

One question. For my own education, is there a variable in PDQ that refers to the computer name as listed in PDQ?

June 16, 2020 17:32

Yes, but it's only available in Tools with a Run Type of Local.

Comparing a registry value to the PDQ Inventory computer name

Comments

Didn't find what you were looking for?