How to handle multiple results from relevance in action script

Content Authoring
1

(imported topic written by SystemAdmin)

I am trying to write a fixlet that will will check multiple locations to see if a certain registry key exists or is set incorrectly and then take action to create or change it. I am pretty sure that I have the relevance correct as I can make changes in the registry and see the intended results displayed in the relevance debugger. The problem I am having is how to take the relevance I’ve written and translate that into an action.

I am thinking that if the fixlet finds more than one place where the value needs to be edited then it will return multiple results in the action script. Will that even work? Here is the relevance I’ve written that I was planning on trying to update for the action. If someone could take a look at make some suggestions it would be great.

exist keys whose (exist key “Software\Cisco\CSAgent” of it AND (not exist value “BalloonPopupsDisabled” of key “Software\Cisco\CSAgent” of it OR value “BalloonPopupsDisabled” of key “Software\Cisco\CSAgent” of it !=1))of key “HKEY_USERS” of registry

The registry value name “BalloonPopupsDisabled” can’t work in the HKLM and has to be put in for each user on the machine. The intended end result is for the value to be added if it doesn’t exist or changed to 1 if it does exist and doesn’t equal 1. Since there are subkeys of the HKEY_USERS hive that don’t correspond to real users then I put the check in for the “Software\Cisco\CSAgent” subkey so it would only be relevant on actual users.

My reasoning behind writing the relevance this way is that if I could get it to work then it wouldn’t matter who or if anyone was logged on to the machine where trying to make it use the current user stuff would. It would also take care of every user on the computer at once rather than waiting for them to login. Let me know if there’s a better way to accomplish my end result. Thanks!

2

(imported comment written by BenKus)

Hey D8taSlay3r,

Your relevance looks pretty solid. Good work! (You might add an “as integer” here: (value “BalloonPopupsDisabled” of key “Software\Cisco\CSAgent” of it as integer)

This is not a bad time to use a vbscript, batch script, or another scripting/executable. Those scripting languages will let you go in and create the logic you are looking for by looping through the registry keys and then setting the values. Your relevance can still detect the problem…

I can see a way to do this in relevance… it looks something like this:

appendfile {“Windows Registry Editor Version 5.00%0d%0a%0d%0a” & concatenation “%0d%0a” of (“” & “%0d%0a%22BalloonPopupsDisabled%22=%221%22%0d%0a”) of keys whose (exist key “Software\Cisco\CSAgent” of it AND (not exist value “BalloonPopupsDisabled” of key “Software\Cisco\CSAgent” of it OR value “BalloonPopupsDisabled” of key “Software\Cisco\CSAgent” of it as integer != 1))of key “HKEY_USERS” of registry}
move __appendfile temp.reg
wait regedit.exe /s temp.reg

I didn’t test this so make sure you play with it a while to make sure it works… It works like this:

  • The relevance I posted will make a file like this:

Windows Registry Editor Version 5.00

HKEY_USERS\S-1-5-19\Software\BigFix

“testing”=“1”

HKEY_USERS\S-1-5-21-1606980848-1767777339-682003330-1112\Software\BigFix

“testing”=“1”

  • This file will be renamed to a .reg file.
  • The .reg file is imported into the registry with the “/s” command.
  • As a note, there is a lot of “%-encoding” in this relevance. For your reference: “%22” = the " character. “%0d%0a” is a newline followed by a carriage return.

Hopefully that works for you…

Ben

(I like your avatar)

3

(imported comment written by SystemAdmin)

Thanks Ben! That worked great!