List of sites in IE8 Compatibility View

(imported topic written by SystemAdmin)

Hello

I’m trying to figure out what sites User’s have in their Compatibility View list so I can decide what ones to include into either a Group Policy or a BigFix task by default for all staff. My relevance is:

values “UserFilter” of key (“HKU” & (component string of sid of security account (name of current user)) & “\Software\Microsoft\Internet Explorer\BrowserEmulation\ClearableListData”) of registry

But the problem is the key is stored as Hex. How do I convert this back to text?

I tried to combine my relevance with one I found elsewhere on the forums but get the following:

q: hexadecimal string (concatenation of ((hexadecimal integer (last 2 of it & first 2 of it) as hexadecimal) as string) of firsts 4 of following texts of positions whose ( it mod 4 = 0 ) of values “UserFilter” of key (“HKU” & (component string of sid of security account (name of current user)) & “\Software\Microsoft\Internet Explorer\BrowserEmulation\ClearableListData”) of registry )

E: The operator “positions” is not defined.

(imported comment written by NoahSalzman)

I don’t have that key on my test box… can you post a sanitized example of what this returns:

values “UserFilter” of key (“HKU” & (component string of sid of security account (name of current user)) & “\Software\Microsoft\Internet Explorer\BrowserEmulation\ClearableListData”) of registry

(imported comment written by SystemAdmin)

I get a hexidecimal answer which I would like to convert back into text.

a: 411f00005308adba010000005200000001000000010000000c00000035108f94e42bcc01010000001a0077006900740068006f007500740066006500610072006f0072006600610076006f00750072002e006f00720067002e0061007500

(imported comment written by NoahSalzman)

Q: concatenation “” of substrings separated by “%00” of hexadecimal string “411f00005308adba010000005200000001000000010000000c00000035108f94e42bcc01010000001a007700690074006”

A: A%1fS%08%ad%ba%01R%01%01%0c5%10%8f%94%e4+%cc%01%01%1awithoutfearorfavour.org.au

(imported comment written by SystemAdmin)

How do I combine the 2 is my problem? When I put them together in the relevance editor I get the below

q: concatenation “” of substrings separated by “%00” of hexadecimal string (values “UserFilter” of key (“HKU” & (component string of sid of security account (name of current user)) & “\Software\Microsoft\Internet Explorer\BrowserEmulation\ClearableListData”) of registry)

E: The operator “hexadecimal string” is not defined.

(imported comment written by BenKus)

Make sure to cast your reg value “as string”:

concatenation of substrings separated by “%00” of hexadecimal string (values “UserFilter” of key (“HKU” & (component string of sid of security account (name of current user)) & “\Software\Microsoft\Internet Explorer\BrowserEmulation\ClearableListData”) of registry as string)

Ben

(imported comment written by SystemAdmin)

Perfect. Just what I wanted. Thanks.

(imported comment written by SystemAdmin)

Is there a way to look for specific text from the results of

Q:concatenation of substrings separated by “%00” of hexadecimal string (values “UserFilter” of key (“HKU” & (component string of sid of security account (name of current user)) & “\Software\Microsoft\Internet Explorer\BrowserEmulation\ClearableListData”) of registry as string)

For example if I was looking for the string elcamino within the results. How would I do this?