Getting user UPN and SMTP values

Content Authoring
1

I am looking to create bigfix analysis to pull email address and smtp address using bigfix analysis.

I need to customize this analysis when *where HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\MSIPC\ is static while user GUID is different on every machine.

values “email” of key “HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\MSIPC*87a812e6-2785-41c6-9e72-5837fb48370d.rms.geous.aadrm.com*\Identities” of registry

Basically I want to get user logged in user email address…

2

Try

values "email" of keys "Identities" of keys of key "HKCR\Local Settings\Software\Microsoft\MSIPC" of registry

1 Like
3

This is expertly I was looking for.

4

How do I pull smtp address ?

5

I don’t have that key on the machine I’m on but you can replace “email” with any other value name that exists in your estate, eg say the value “smtpaddress” existed,

values "smtpaddress" of keys "Identities" of keys of key "HKCR\Local Settings\Software\Microsoft\MSIPC" of registry

6

If you are unsure of the values, as I know a global estates can vary a lot, you could parse all values, the data from each and each parent key value using an inspection. This using manually added keys just for demo

Q: ((names of it, it) of values of it, it) of keys "Identities" of keys of key "HKCR\Local Settings\Software\Microsoft\MSIPC" of registry
A: ( email, someone@somewhere.com ), HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\MSIPC\FakeGUIDKey\Identities
A: ( someotherkey, datafromthatvalue ), HKEY_CLASSES_ROOT\Local Settings\Software\Microsoft\MSIPC\FakeGUIDKey\Identities
1 Like