How to write a CIR that uses REG QUERY *outside* of Wow6432Node on 64 bit Windows 7 machine?
When writing a Custom Inventory Rule, is there a way to use REG QUERY to look *outside* the Wow6432Node?
I can tell that it will fail when I test on a 64 bit machine and try running my query in the 64 bit cmd.
To be more specific, in my circumstances I particularly need to look at the ProductId value normally at HKLM\Software\Microsoft\Windows NT\CurrentVersion. The Wow6432Node version does not contain this value at all...
Thank you in advance!
1 Comment
[ + ] Show comment
Answers (2)
Please log in to answer
Posted by:
SMal.tmcc
9 years ago
see the answer I posted here:
http://www.itninja.com/question/custom-inventory-rule-syntax-question?utm_source=itn_email&utm_medium=comment_alert_answer&utm_campaign=notifications&utm_content=question_permalink
http://www.itninja.com/question/custom-inventory-rule-syntax-question?utm_source=itn_email&utm_medium=comment_alert_answer&utm_campaign=notifications&utm_content=question_permalink
Comments:
-
if that does not work modify what flip001 said to fit your reg query call and call: reg query hklm64\software\etc... - SMal.tmcc 9 years ago
-
the sysnative approach should work for either 32 or 64, where as using hklm64 will only work on 64bit machines - SMal.tmcc 9 years ago
-
Thank you! - agibbons 9 years ago
Make a CIR that will work with both 32 and 64 by using OR, then create a smart label that says [your cir name] matches regex .*('ABC|123').*
RegistryValueReturn(HKLM64\Software\Microsoft\Windows NT\CurrentVersion,ProductId,TEXT) OR RegistryValueReturn(HKLM\Software\Microsoft\Windows NT\CurrentVersion,ProductId,TEXT) - flip1001 9 years ago