(imported topic written by wolverine23)
How can I get current name of pst file and size file used in the outlook from HKEY_CURRENT_USER\Software\Microsoft\Windows NT\Current Version\Windows Messaging Subsystem\Profiles\profilename\
(imported comment written by jessewk)
Wolverine,
See this post:
http://forum.bigfix.com/viewtopic.php?id=318
Once you have the path to the file, you can ask for 'size of file ’ to get the size.
(imported comment written by SystemAdmin)
Wolverine,
The post that jessewk linked to refers specifically to the challenges of pulling it for Office 2003. If you are interested in Office2K/XP, the relevance is different.
Q: if ( name of operating system as lowercase starts with “win” ) then if exists key “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles” of keys of key “HKEY_USERS” of registry then ( ( pathname of it as string & “|” & ( less significance 4 of ( ( size of it ) as floating point / 1024 / 1024 ) ) as string & " MB" ) of ( ( values “001e6700” of keys of keys of key “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles” of keys of key “HKEY_USERS” of registry as file ) ) ) else “No PSTs Defined” else “Non-Windows OS”
A: C:\Documents and Settings\jnharry\Desktop\Personal Folders(1).pst|.48 MB
A: C:\Documents and Settings\jnharry\Desktop\Personal Folders(2).pst|.03 MB
Hope that helps
(imported comment written by wolverine23)
Thanks so much, psts files are showed.
(imported comment written by wolverine23)
jnharry
I am doing an analysis adding property as show.
value “001e6700” of key whose (exists value “001e6700” of it and value “001e6700” of it as string contains “pst”) of key “HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\MS Exchange Settings” of registry
Relevance
exists regapps “outlook.exe”
But only 3 PCs show the result (pst pathname and filename), the rest show
Do you know about it ?, thanks.
regards.
(imported comment written by SystemAdmin)
It probably is because you referencing HKEY_CURRENT_USER, which for the BigFix Client is the SYSTEM account, and not the user account. Read this thread, which should point you in the right direction: http://forum.bigfix.com/viewtopic.php?id=11
That is one reason why I was using the HKEY_USERS hive.
Hope that helps,
Jim
(imported comment written by wolverine23)
I have the same problem, only 3 computers are showed with the pst name of 3000 pcs, I am using the next property in the bigfix analysis, with relevance true. some idea ? thanks for your help.
Q: value “001e6700” of key whose (exists value “001e6700” of it and value “001e6700” of it as string contains “pst”) of key “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\MS Exchange Settings” of (key “HKEY_CURRENT_USER” of registry) of (key whose ((it = name of current user as lowercase OR it starts with name of current user as lowercase & “@” ) of (it as string as lowercase) of value “Logon User Name” of key “Software\Microsoft\Windows\CurrentVersion\Explorer” of it) of key “HKEY_USERS” of registry)
A: D:\Email\test.pst
regards.
Wolverine.
(imported comment written by SystemAdmin)
What version of Office are you trying to detect?
(imported comment written by wolverine23)
pst files of outlook 2000 sp3.
(imported comment written by SystemAdmin)
Is there a reason you need to restrict it to the current user that is logged in (if any)? When I ran your relevance, I received a “Singular expression refers to non-unique object.” error. I haven’t had time to debug it yet.
The relevance below will get you
any
.pst defined for any user of Outlook on a given computer. It gives the location and the size of the PST, delimited with a vertical bar.
Q: if exists values “001e6700” of keys of keys of key “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles” of keys of key “HKEY_USERS” of registry then ( ( pathname of it as string & “|” & ( less significance 4 of ( ( size of it ) as floating point / 1024 / 1024 ) ) as string & " MB" ) of ( ( values “001e6700” of keys of keys of key “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles” of keys of key “HKEY_USERS” of registry as file ) ) ) else “No PSTs Defined”
A: C:\Documents and Settings\jnharry\Desktop\Personal Folders(1).pst|.48 MB
A: C:\Documents and Settings\jnharry\Desktop\Personal Folders(2).pst|.03 MB
T: Evaluates to plural result in 5.187 ms
(imported comment written by wolverine23)
You are rigth, may be I have not explained correctly, I have about 3000 users with outlook 2000 sr-1 sp3 and I want to do an analysis where I get Current pst file (delivery = delivery new email to the following location) pst file where the user is receiving all messages (only 1 pst file), the user can configure all pst files that he wants, but only is receiving in one. for example :
computername username current pst file size file
test1 user1 d:\email\user1.pst 1500.23 mb.
test2 user2 d:\email\user2.pst 150.00 mb.
test3 user3 d:\email\user3.pst 15.00 mb.
test4 user4 d:\email\user4.pst 50.00 mb.
test5 user5 d:\email\user5.pst 1150.00 mb.
test6 user6 d:\email\user6.pst 250.00 mb.
test7 user7 d:\email\user7.pst 150.00 mb.
test8 user8 d:\email\user8.pst 150.00 mb.
regards.
wolverine.
(imported comment written by SystemAdmin)
Ok, that’s pretty clear. The trick here is to know the registry entry that tells Outlook to send mail to the PST versus an Exchange message store. It probably is in the registry branch “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\MS Exchange Settings”, but I don’t know how to discover that. Get that information and then adapting the relevance would be fairly straightforward.
Jim
(imported comment written by wolverine23)
Hi Jim.
We were working finding the registry keys to indentify current pst (delivery messages) in the current user and we found that
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\MS Exchange Settings\b2714c08666b544c958283ec78821581
value “00033009” reg_binary = 02100000 has this value data.
then we made this to get the values.
first step.
value “00033009” of key “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\MS Exchange Settings\b2714c08666b544c958283ec78821581” of keys of key “HKEY_USERS” of registry
A: 02100000
next We made this to get the current outlook profile is in use :
Q: concatenation of “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles” & value (“DefaultProfile”) of key (“Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles”) of keys of key “HKEY_USERS” of registry as string
A: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\MS Exchange Settings
next We want to get the same value of first step as follow but ( “The operator “key” is not defined.” ) is showed, what I can do to fix it or exist a better way to get this.
Q: value “00033009” of key ( concatenation of “Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles” & value (“DefaultProfile”) of key (“Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles”) of keys of key “HKEY_USERS” of registry as string)
E: The operator “key” is not defined.
Thanks for hour help
Wolverine.
(imported comment written by SystemAdmin)
Wolverine,
I haven’t had the chance to reply, but I think the answer is over in this thread http://forum.bigfix.com/viewtopic.php?id=378. Check it out and see if it works for you…
Jim
(imported comment written by wolverine23)
Thanks, that is working fine.