Regedit execution on windows server 2008 r2

Usage and Config Security

system November 15, 2012, 12:46pm 1

(imported topic written by SystemAdmin)

Hello,

I am trying to apply weak chipers fix for set of servers by creating a bigfix task, however it is failing to execute regedit action:

Completed delete temp.reg

Completed delete __createfile

Completed Createfile until end-reg-edit-commands

Completed Windows Registry Editor Version 5.00

Completed

http://HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server

Completed “Enabled”=dword:00000000

Completed

Completed

http://HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server

Completed “Enabled”=dword:00000000

Completed

Completed

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\DES 56/56

Completed “Enabled”=dword:00000000

Completed

Completed

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\NULL

Completed “Enabled”=dword:00000000

Completed

Completed

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 128/128

Completed “Enabled”=dword:00000000

Completed

Completed

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 40/128

Completed “Enabled”=dword:00000000

Completed

Completed

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 56/128

Completed “Enabled”=dword:00000000

Completed

Completed

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128

Completed “Enabled”=dword:ffffffff

Completed

Completed

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128

Completed “Enabled”=dword:00000000

Completed

Completed

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128

Completed “Enabled”=dword:00000000

Completed

Completed

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 64/128

Completed “Enabled”=dword:00000000

Completed

Completed

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168/168

Completed “Enabled”=dword:ffffffff

Completed end-reg-edit-commands

Completed move __createfile temp.reg

Failed wait regedit -s temp.reg

If I run created file manually it work.

Can you please help me to understand why command wait “regedit -s temp.reg” is failing and how to fix it?

system November 15, 2012, 7:45pm 2

(imported comment written by Eric Walker)

Hi Vasily,

I think you want the Fixlet Authoring forum – in this forum we focus on specific details of SCA and the SCM content.

http://www.ibm.com/developerworks/forums/forum.jspa?forumID=2701

But to better answer your question, it will help us to have the original action that you’re trying to run.

All the best,

Eric

system December 4, 2012, 12:55am 3

(imported comment written by SystemAdmin)

Take a look at the “Disable Encryption for Clients” task (

http://bigfix.me/cdb/fixlet/140

). It contains an example of how you can import a registry file into the registry.

You might also consider using native actionscript to set your registry values:

http://bigfix.me/cdb/fixlet/228

see action 2 or 3

http://bigfix.me/cdb/fixlet/74

see action 1 look for the “regset” command

I see in your exmple you’re trying to set dword’s… try looking at this too:

http://bigfix.me/cdb/fixlet/107

or

http://bigfix.me/cdb/fixlet/89