Regdelete hkey_current_user or hkey_user for a RDP connnected user

Content Authoring
1

(imported topic written by SystemAdmin)

Hi

Is there a easy way to have a fixlet action delete a registry value in hkey_current_user or hkey_users for a user that is logged in via RDP?

I used the “exists logged on user” in the relevance to return true for a logged in user and the presence of a reg data value:

exists logged on user and (exist value whose (it as string = “010101010”) of key “Software\Microsoft\Office\11.0\Outlook\Resiliency\DisabledItems” of current user keys (logged on users) of registry)

What I’m trying to figure out now is how to delete that key.

Can you use the runascurrentuser.exe to run regdelete "

http://HKEY_CURRENT_USER\Software\Microsoft…\DisabledItems

" “”{(name of value whose (it as string = “010101010”) of key “HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Outlook\Resiliency\DisabledItems” of registry)}"

Or is there another way to edit the hkey_users registry of a user that is connected via RDP.

Thanks

Rob

2

(imported comment written by jeremylam)

If you want to use runascurrentuser.exe to change a registry key, create a file using appendfile/createfile and then run regedit.exe with runascurrentuser.exe. There’s an example here:

http://forum.bigfix.com/viewtopic.php?pid=7460#p7460

3

(imported comment written by SystemAdmin)

Hi Jeremy,

I did see that before I posted my question. Can you you the relevance substitution { } in appendfile? The problem is that the data value is fixed, but the name can be different from user to user.

I took a look again at the bigfix help and saw that you can use the substitutions in appendfile.

Thanks for your help.