MS10-046 relevance issues

Content Authoring
1

(imported topic written by robpm91)

We implemented the workaround prior to MS10-046 being released, and now need to remove this workaround as machines are patched. I’ve created a task to run the “undo” but am having trouble with the relevance, specifically the line:

exists key “HKCR\lnkfile\shellex\IconHandler” whose (exists value “Default” of it) of registry

or

exists value “Default” of key “HKCR\lnkfile\shellex\IconHandler” of native registry

(and any variation on the syntax to check for the value “Default”)

always returns false regardless of whether the Default value is present.

Am i missing something obvious here

2

(imported comment written by robpm91)

All OK - found an alternative approach:

exists default value whose (it as string != “{00021401-0000-0000-C000-000000000046}”) of key “HKCR\lnkfile\shellex\IconHandler” of native registry