/bundles/itninjaweb/img/Breadcrumb_cap_w.png
Hi -

I am trying to use a KBOX script to read a registry key on end user machines and compare that to a predefined value. The problem is that the key value is a string that traverses multiple lines and I can't figure out how to specify this as the case. The KBOX reads the data as "value1", "value2", "value3". However, whenever I specify that format as what to look for, it doesn't recognize it (presumably because you can't include quotations in the comparison criteria). I have tried escape characters (\), logical identifiers (AND), etc.

Any ideas?
0 Comments   [ - ] Hide Comments

Comments

Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
Answer this question or Comment on this question for clarity

Answers

0
Do you mean the reg value type is of REG_MULTI_SZ?
If so:
  • Go to a machine that has the test data you want in the registry.
  • export that key from registry
  • examine that in a text editor
  • compare against that value. will look something like hex:62,00,6c,00,61,00,68
Answered 09/28/2010 by: GillySpy
Seventh Degree Black Belt

Please log in to comment
0
Thank you for your help, however, I did try that and it doesn't appear to be working. Attached are my pictures of the .reg file (the key in question is "Security Packages" at the top. In addition I have attached screens of my script that compares the value, and the result.

You are correct that it is a REG_MULTI_SZ type value.





Answered 09/28/2010 by: wkucardinal
Orange Senior Belt

Please log in to comment
0
Just a point on terminology: Security Packages is a value not a key.

What editor is this and I hope those backslashes are not making it's way into your verify "equal to" field.

Beyond that some client logging would be great. Please open a ticket to troubleshoot the nitty gritty.
Answered 09/28/2010 by: GillySpy
Seventh Degree Black Belt

Please log in to comment
0
That screen is from notepad++ but it looks exactly the same in notepad.
Answered 09/28/2010 by: wkucardinal
Orange Senior Belt

Please log in to comment
0
Ticket 88769 is open for this request.
Answered 09/28/2010 by: wkucardinal
Orange Senior Belt

Please log in to comment