Custom Inventory Rule - Retrieve DWORD value

I am having some issues with a Custom Inventory Rule and could use some extra set of eyes on what I have so far as it is not returning any values.  I've also looked at several articles in here, but still not clear to me as to what I'm doing wrong.

So far, I have the following created:

  - Created CIR under the "Software" section containing the inventory rule limited to Windows 10 only (Searching for a DWORD registry value)

        RegistryValueReturn(HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield\SweepTimes,AllSweepsCompleted,text)

  - Created a manual label

  - Created a Smart Label targeting a specific machine (I see the label applied to the system)

However, no values are showing up in the Custom Inventory Field.  I have also tried creating spaces between the registry value as well as the type (text) as well as tried changing the type to upper case and NUMBER with no avail.

In addition, I was wondering if there is 1) a way to test this script outside of KACE (i.e. powershell, command line, etc.) and 2) what logs can I view that shows if the CIR is attempting execution and is passing/failing?  Can those logs be collected using "Choose Action" --> "Upload Agent Files" within that systems inventory record?  Thanks in advance for any assistance.

3 Comments   [ + ] Show comments
  • What is the OS of the targeted device? 32-bit or 64-bit ?
    Version of SMA?
    Version of the Agent?
    The CIR runs at inventory, has an inventory occurred? - KevinG 1 year ago
  • Hi KevinG,

    The OS should be targeting any Windows 10 version. Mostly 64-bit, but I am not excluding the 32-bit at this time.
    SMA is 10.2.234
    Agent is 10.2.108
    Inventory has occurred, but no luck. Label was applied on Friday 9/4/2020. Is a label required to be applied to a system for the CIR to run?

    Best Regards,
    David - ddihel 1 year ago
  • That worked! Would I add both entries if I am trying to target both 32 and 64-bit OS's?

    RegistryValueReturn(HKLM64\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield\SweepTimes,AllSweepsCompleted,text)

    RegistryValueReturn(HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield\SweepTimes,AllSweepsCompleted,text) - ddihel 1 year ago
    • you can use both in one CIR if you just put an OR between them

      RegistryValueReturn(HKLM64\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield\SweepTimes,AllSweepsCompleted,text) OR RegistryValueReturn(HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield\SweepTimes,AllSweepsCompleted,text) - n1md4 1 year ago

Answers (1)

Answer Summary:
Posted by: KevinG 1 year ago
Red Belt

Use (HKLM64\Software.... to target a 64 bit device

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login


This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ