Comments on: Query Registry Value using CMPivot | ConfigMgr | SCCM

By: Anthony

Anthony

In reply to Carl. It is HKCR not HKCU

By: Anthony

Anthony

Tried to use it on hkcr:\\SOFTWARE\\ – no luck 🙁
Any suggestions for Computer\HKEY_CLASSES_ROOT\SOFTWARE\?

By: Prajwal Desai

Prajwal Desai

In reply to Rolf. You can get the registry path from another computer, provided the software is installed.

By: Rolf

Rolf

My Problem is that I just know the beginning of the path and don’t know the registry key itselfe.
currently I use Registry(‘hklm:\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\client’) to get ALL keys.
but that doesnt work if I just look for Registry(‘hklm:\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4’)
as in this path are no keys

Is there a chance to look for a path ?

By: Carl

Carl

In reply to Dominique.

An exmaple I use. Query first off key would always be there liek the release ID for windows. Then Join that to the key you are checking, in my case WMITelemetry.
Then create a condition (where clause) for value1 (which is the value returned for the 2nd registry key)

Registry(‘hklm:\SOFTWARE\Microsoft\Windows NT\CurrentVersion’) | where Property == ‘ReleaseID’
| join kind=leftouter (Registry(‘hklm:\SOFTWARE\Microsoft\Internet Explorer\WMITelemetry’))
| where isnull(Value1)
| project device, Property

By: Carl

Carl

In reply to ROm1. Runs under system context. IF a user is logged in you can query by their SID under HKEY_USERS

By: Dominique

Dominique

In reply to Birgit. Same request here how to query for missing registry key?

By: ROm1

ROm1

can CMPIVOT query HKCR ?

By: Birgit

Birgit

Thanks Prajwal, that works fine for an existing registry key. I am desperate looking for a CMPivot query which gives me the devices without a specific registry key. Thanks a lot.

By: Jason

Jason

Can CMPivot look at HKey Current User ?