Since the BigFix Client typically runs as the SYSTEM account, it’s HKEY_CURRENT_USER branch does not match the logged in user’s branch (assuming a user is logged in at all). As such, we have to query keys under HKCU a bit differently. We can query under HKEY_USERS under the appropriate SID (or across all SIDs depending on the use case), or take an approach such as that described in this thread which leverages the ‘current user keys’ inspector: