When BigFix runs a Fixlet/Task/Action it’s running as the System user, so you’re changing the HKCU of “NT Authority\System”, and not the currently logged in user.
Option 1
There is a utility available through teh bigfix support pages called “RunAsCurrentUser”.
You will include a download for it, just below your current download is fine (with another continue if statement). It can be as the .exe, so no .tmp extraction is required, then you can change:
waithidden regedit /s “wizardedit.reg”
to
waithidden runascurrentuser.exe /w /q “{pathname of windows folder}\regedit.exe” /s “{name of client folder of site “actionsite”}\wizardedit.reg”
Option 2
Don’t edit HKCU. Edit HKEY_sers. Not an option for all items in this area, but I think that the users screensaver settings can be affected there.
You are trying to use regset AND regedit.exe /s. Use one or the other (recommend regedit.exe)
Try:
download http://Server ip:port/Uploads/2cb9976eb94fe64392813263a0c398390348eb94/file.tmp
continue if {(size of it = 1034203 AND sha1 of it = “2cb9976eb94fe64392813263a0c398390348eb94”) of file “file.tmp” of folder “__Download”}
extract ubiscr.tmp
copy “__Download\file.scr” “{pathname of system folder}\file.scr”
delete __appendfile
delete scrn.reg
appendfile Windows Registry Editor Version 5.00
appendfile
appendfile
appendfile “SCRNSAVE.EXE”="{escape of pathname of system folder}\file.scr"
appendfile
move __appendfile scrn.reg
waithidden “{pathname of windows folder}\regedit.exe” /s “{pathname of client folder of site “actionsite”}\scrn.reg”
I just tested it on my system and it works just fine.
When you say your action failed, it would be helpful if you could pull the lines from the client log that shows WHY it failed.
Also note that you wrote
Aakashk
Option 2 only File path
waithidden “c:\windows\system32\regedit.exe” /s “c:\windows\system32\file.scr\scrn.reg” it is getting failed
but I wrote
waithidden “{pathname of windows folder}\regedit.exe” /s “…scrn.reg”
It appears you are hard-coding pathnames, probably not a good idea.
regedit.exe should be in the windows folder not the system folder
Assuming the download file is “ubiscr.tmp” and it contains “ubi.scr” and you included the correct sha1, this can be run with NO changes (not even to the IP/port because your BES Server will perform the download, no one else, and it gets the file from itself (at 127.0.0.1)):
extract ubiscr.tmp
delete "{pathname of system folder}\ubi.scr"
copy “__Download\ubi.scr” “{pathname of system folder}\ubi.scr”
delete __appendfile
delete “{pathname of system folder}\scrn.reg"
appendfile Windows Registry Editor Version 5.00
appendfile
appendfile
appendfile “SCRNSAVE.EXE”=”{escape of pathname of system folder}\ubi.scr"
appendfile
move __appendfile "{pathname of system folder}\scrn.reg"
waithidden “{pathname of windows folder}\regedit.exe” /s “{pathname of system folder}\scrn.reg”
if the above fails:
1 please include the client log.
2 check that “C:\Windows\System32\scrn.reg” exists
(name of operating system = “WinME” OR name of operating system = “Win2000” OR name of operating system = “WinXP” OR name of operating system = “WinXP-2003” OR name of operating system = “Win2003” OR (name of it = “WinVista” and product type of it = nt workstation product type) of operating system OR (name of it = “Win2008” or (name of it = “WinVista” and product type of it != nt workstation product type)) of operating system) AND ((not exists key “HKEY_CURRENT_USER\Control Panel\Desktop” whose (exists value “SCRNSAVE.EXE” whose (it as string = “C:\WINDOWS\system32\myscreensaver.scr”) of it) of native registry))
this is what my relevance is.
Here the issue is in some PC the screensaver which i deployed is present but then also it shows as this machine is relevent for this task.
Please guide me where in this relevance issue is present
continue if {(size of it = 296103 AND sha1 of it = “ae5d80bbe6cb9bfbd04c1721640ac52dd9d0b802”) of file “PhotoScreensaverscr.tmp” of folder “__Download”}
extract PhotoScreensaverscr.tmp
delete “{pathname of system folder}\PhotoScreensaver.scr”
copy “__Download\PhotoScreensaver.scr” “{pathname of system folder}\PhotoScreensaver.scr”
delete __appendfile
delete “{pathname of system folder}\scrn.reg”
appendfile Windows Registry Editor Version 5.00
appendfile
appendfile “SCRNSAVE.EXE”="{escape of pathname of system folder}\PhotoScreensaver.scr"
appendfile
move __appendfile “{pathname of system folder}\scrn.reg”
waithidden “{pathname of windows folder}\regedit.exe” /s “{pathname of system folder}\scrn.reg”
i copy all the script like above, but still have an error on registry key.
now im seeking your advise.
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
extract PhotoScreensaverscr.tmp
delete "{pathname of system folder}\PhotoScreensaver.scr"
copy “__Download\PhotoScreensaver.scr” “{pathname of system folder}\PhotoScreensaver.scr”
delete __appendfile
delete "{pathname of system folder}\scrn.reg"
appendfile Windows Registry Editor Version 5.00
<<It’s failed, start from here>>_________________________
appendfile
appendfile “SCRNSAVE.EXE”="{escape of pathname of system folder}\PhotoScreensaver.scr"
appendfile
move __appendfile "{pathname of system folder}\scrn.reg"
waithidden “{pathname of windows folder}\regedit.exe” /s “{pathname of system folder}\scrn.reg”
(name of it = “Win95” OR name of it = “Win98” OR name of it = “WinME” OR name of it = “WinNT” OR name of it = “Win2000” OR name of it = “WinXP” OR name of it = “Win2003” OR (name of it = “WinVista” and product type of it = nt workstation product type) OR (name of it = “Win2008” or (name of it = “WinVista” and product type of it != nt workstation product type)) OR (name of it = “Win7”) AND (exists regapp “besclient.exe” whose (version of it >= “7.2.4.60”)) OR name of it = “WinXPe”) of operating system AND (((exists key “Software\Policies\Microsoft\Windows\Control Panel\Desktop” of it AND exists key “Control Panel\Desktop” whose (value “ScreenSaverIsSecure” of it != “1” OR value “ScreenSaveActive” of it != “1”) of it) of key whose ((it = name of current user as lowercase OR it starts with name of current user as lowercase & “@”) of (it as string as lowercase) of value “Logon User Name” of key “Software\Microsoft\Windows\CurrentVersion\Explorer” of it) of key “HKEY_USERS” of registry) OR (exists value “SCRNSAVE.EXE” whose (it as string = “C:\WINDOWS\system32\PhotoScreensaver.scr”) of key (“HKEY_USERS” & (name of key whose (value “Logon User Name” of key “Explorer” of key “CurrentVersion” of key “Windows” of key “Microsoft” of key “Software” of it as string as lowercase = name of current user as string as lowercase) of key “HKEY_USERS” of registry) & “\Control Panel\Desktop”) of registry)) AND true