Registry Changes via Fixlet

Content Authoring
1

We are running into issues getting our registry code to work. Below is the code, if anyone can lend a helping hand. When we run this, nothing happens. We’ve tried using the regset in front of the HKCU, but this fails with a line code error.

Any help would be appreciated.

Createfile until end-reg-edit-commands
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\AutoDiscover]
“PreferLocalXML”=hex:01,00,00,00
"ExcludeHttpRedirect"=hex:00,00,00,00
"ExcludeHttpsAutodiscoverDomain"=hex:01,00,00,00
"ExcludeHttpsRootDomain"=hex:01,00,00,00
"ExcludeScpLookup"=hex:01,00,00,00
"ExcludeSrvLookup"=hex:01,00,00,00
"ExcludeSrvRecord"=hex:01,00,00,00
"RedirectServers/autodiscover.outlook.com"=hex:00,00,00,00
"RedirectServers/autodiscover-s.outlook.com"=hex:00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\AutoDiscover]
“PreferLocalXML”=hex:01,00,00,00
"ExcludeHttpRedirect"=hex:00,00,00,00
"ExcludeHttpsAutodiscoverDomain"=hex:01,00,00,00
"ExcludeHttpsRootDomain"=hex:01,00,00,00
"ExcludeScpLookup"=hex:01,00,00,00
"ExcludeSrvLookup"=hex:01,00,00,00
"ExcludeSrvRecord"=hex:01,00,00,00
"RedirectServers/autodiscover.outlook.com"=hex:00,00,00,00
"RedirectServers/autodiscover-s.outlook.com"=hex:00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\AutoDiscover]
“PreferLocalXML”=hex:01,00,00,00
"ExcludeHttpRedirect"=hex:00,00,00,00
"ExcludeHttpsAutodiscoverDomain"=hex:01,00,00,00
"ExcludeHttpsRootDomain"=hex:01,00,00,00
"ExcludeScpLookup"=hex:01,00,00,00
"ExcludeSrvLookup"=hex:01,00,00,00
"ExcludeSrvRecord"=hex:01,00,00,00
"RedirectServers/autodiscover.outlook.com"=hex:00,00,00,00
"RedirectServers/autodiscover-s.outlook.com"=hex:00,00,00,00

[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\AutoDiscover]
“PreferLocalXML”=hex:01,00,00,00
"ExcludeHttpRedirect"=hex:00,00,00,00
"ExcludeHttpsAutodiscoverDomain"=hex:01,00,00,00
"ExcludeHttpsRootDomain"=hex:01,00,00,00
"ExcludeScpLookup"=hex:01,00,00,00
"ExcludeSrvLookup"=hex:01,00,00,00
"ExcludeSrvRecord"=hex:01,00,00,00
"RedirectServers/autodiscover.outlook.com"=hex:00,00,00,00
"RedirectServers/autodiscover-s.outlook.com"=hex:00,00,00,00

end-reg-edit-commands
move __createfile autodiscover.reg
dos reg import autodiscover.reg

2

A couple of things to watch out for -
As BigFix is running in the context of SYSTEM, HKEY_CURRENT_USER has no meaning.
And you also need to watch for 32-bit redirection. Since BigFix is a 32-bit client, and for backward compatibility, Software\Microsoft automatically redirects to Software\WOW6432Node\Microsoft. You can avoid the redirection by using regset64, or in a batch file using reg.exe by adding action uses wow64 redirection false to your action script.

Something you can try, if you can assume there’s only one logged-on user at a time, is

action uses wow64 redirection false
Createfile until end-reg-edit-commands
Windows Registry Editor Version 5.00

[{pathname of user key of logged on user}\Software\Microsoft\Office\12.0\Outlook\AutoDiscover]
"PreferLocalXML"=hex:01,00,00,00
"ExcludeHttpRedirect"=hex:00,00,00,00
"ExcludeHttpsAutodiscoverDomain"=hex:01,00,00,00
"ExcludeHttpsRootDomain"=hex:01,00,00,00
"ExcludeScpLookup"=hex:01,00,00,00
"ExcludeSrvLookup"=hex:01,00,00,00
"ExcludeSrvRecord"=hex:01,00,00,00
"RedirectServers/autodiscover.outlook.com"=hex:00,00,00,00
"RedirectServers/autodiscover-s.outlook.com"=hex:00,00,00,00

[{pathname of user key of logged on user}\Software\Microsoft\Office\14.0\Outlook\AutoDiscover]
"PreferLocalXML"=hex:01,00,00,00
"ExcludeHttpRedirect"=hex:00,00,00,00
"ExcludeHttpsAutodiscoverDomain"=hex:01,00,00,00
"ExcludeHttpsRootDomain"=hex:01,00,00,00
"ExcludeScpLookup"=hex:01,00,00,00
"ExcludeSrvLookup"=hex:01,00,00,00
"ExcludeSrvRecord"=hex:01,00,00,00
"RedirectServers/autodiscover.outlook.com"=hex:00,00,00,00
"RedirectServers/autodiscover-s.outlook.com"=hex:00,00,00,00

[{pathname of user key of logged on user}\Software\Microsoft\Office\15.0\Outlook\AutoDiscover]
"PreferLocalXML"=hex:01,00,00,00
"ExcludeHttpRedirect"=hex:00,00,00,00
"ExcludeHttpsAutodiscoverDomain"=hex:01,00,00,00
"ExcludeHttpsRootDomain"=hex:01,00,00,00
"ExcludeScpLookup"=hex:01,00,00,00
"ExcludeSrvLookup"=hex:01,00,00,00
"ExcludeSrvRecord"=hex:01,00,00,00
"RedirectServers/autodiscover.outlook.com"=hex:00,00,00,00
"RedirectServers/autodiscover-s.outlook.com"=hex:00,00,00,00

[{pathname of user key of logged on user}\Software\Microsoft\Office\16.0\Outlook\AutoDiscover]
"PreferLocalXML"=hex:01,00,00,00
"ExcludeHttpRedirect"=hex:00,00,00,00
"ExcludeHttpsAutodiscoverDomain"=hex:01,00,00,00
"ExcludeHttpsRootDomain"=hex:01,00,00,00
"ExcludeScpLookup"=hex:01,00,00,00
"ExcludeSrvLookup"=hex:01,00,00,00
"ExcludeSrvRecord"=hex:01,00,00,00
"RedirectServers/autodiscover.outlook.com"=hex:00,00,00,00
"RedirectServers/autodiscover-s.outlook.com"=hex:00,00,00,00
end-reg-edit-commands
move __createfile autodiscover.reg
waithidden reg.exe import autodiscover.reg
1 Like
3

Thank you Jason!
I ran this script and the keys were added successfully. I appreciate the quick response and resolution.

4

So this is running successfully, however in the BigFix console, this is failing with exit code: 0.

We tried adding Exit 0 to the end of the action script, but the issue is still occurring. As mentioned, the keys are being added successfully to the registry, so what we’re trying to accomplish worked, just need to get the console to agree on this.

Also, will this only run with a user logged into the PC? I was hoping this would install for all users, even if the machine is currently logged off.

5

If it’s returning Failed but doing the right thing, then there’s a problem with the Relevance check.

And yes, this will only work with a user logged-on and only affect the logged-on user’s registry. To apply to all users, you could investigate using a Logon Script, a Startup Item, Active Setup, Group Policy, or Local Group Policy.

I have some sample fixlets at bigfix.me and referenced here in the forum to apply Local Group Policy settings; but once applied, the settings are “enforced”, so it’s good for forcing a configuration but not for setting defaults (and allowing the user to change them later).

If this is for applying default settings, my preference would probably be Active Setup (it runs one time, for each user, at their next logon) or a Windows Startup item (runs at every logon and reapplies each time).

6

To “succeed” the initial relevance of a Fixlet must go false. If you make the Fixlet a Task instead then it only has to complete the actionscript successfully to actually “Succeed”