Reg Entry and Not Exists

(imported topic written by jr6591)

I have some relvance which I’m stuck on. If the value is there in the key, my relevance is good. But, if the value itself is not there, then my relevance fails. I can seperate them in relevance statements, but when I put them together, the relevance does not work. Any thoughts?

Q: ((name of operating system = “Win2000” OR name of operating system = “WinXP” OR name of operating system = “WinXP-2003”) AND (exists key “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\NetCache” of registry AND value “Enabled” of key “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\NetCache” of registry as string is not equal to “0”))

E: Singular expression refers to nonexistent object.

Q: (exists key “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\NetCache” of registry AND NOT exists value “Enabled” of key “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\NetCache” of registry)

A: True

So, if the Value Enabled is there (then my relevance is good). if there is no Value under the key, then the relevance is no good. How can I put these together so that if the Value is either not there or not equal to 0 then it will return as true.

FYI … I am finding that if this setting is on, PC’s going into Standby mode lose network drives when they come out of Standby mode. Has anyone seen this issue??? PC’s losing connection to Exchange or network Drives when coming out of Standby mode?

Thanks

(imported comment written by rd6591)

Would this work?

((name of operating system = “Win2000” OR name of operating system = “WinXP” OR name of operating system = “WinXP-2003”) AND (exists (key “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\NetCache” of registry) whose (not exists value “Enabled” of it or value “Enabled” of it != “0”)))

I’ve only got 2.5 days of Relevance experience, so I’m not 100% sure…

(imported comment written by labuski91)

Put simply the key has to exist for bigfix to check it. If it doesnt exist the relevance will fail. so you always need to check for the existence of the key first and then use an “Or” in the statement kind of like how rd did it.

(imported comment written by jr6591)

Unfortunately rd’s relevance is not working. But thanks for the quick response. Rd’s relevance comes back as true, regardless of the value of the dword enabled or even if enabled is not there. I understand that the key has to exist in order for the relevance to work. I’m just not getting my syntax correct as I can’t find the combination.

(imported comment written by NoahSalzman)

How about:

(NOT exists value “Enabled” of key “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\NetCache” of registry

OR

value “Enabled” of key “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\NetCache” of registry as string is not equal to “0”)

The booleans are evaluated in order so you never get to the part after the OR if the first one is true (doesn’t exist).

(imported comment written by jr6591)

Thanks Noah. Works great. On another note and in line with what I am trying to detect, has anoyone seen issues with PC’s losing connectivity to network drives or the exchange server once their PC comes out of Standby? Thanks

(imported comment written by NoahSalzman)

Very glad it worked.

I would start a new thread for that last question.