Searching for existence of key value within regitry key

Usage and Config
1

(imported topic written by rkc91)

Folks

Want to search for a value of key in registry eg. search for SpeedDuplex within HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class{4D36E972-E325-11CE-BFC1-08002bE10318}

2

(imported comment written by SystemAdmin)

exists value “SpeedDuplex” of Key “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class{4D36E972-E325-11CE-BFC1-08002bE10318}” of registry

3

(imported comment written by rkc91)

It return false as it is in one of the subkeys on my machine it is under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class{4D36E972-E325-11CE-BFC1-08002bE10318}\0008

4

(imported comment written by SystemAdmin)

if you just want to find out which adapter is “physical” you can use a part of the relevance in this post.

http://www.pimpmybes.com/viewtopic.php?id=194

or do

exists value “SpeedDuplex” of keys of Key “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class{4D36E972-E325-11CE-BFC1-08002bE10318}” of registry

5

(imported comment written by rkc91)

Thanks I was missing keys of key

6

(imported comment written by brolly3391)

Hey rkc,

Now that I look at the registry key that you are checking, I see that you actually are trying to go a level deeper.

It seems that you are trying to get

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class{4D36E972-E325-11CE-BFC1-08002bE10318}\0000

SpeedDuplex

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class{4D36E972-E325-11CE-BFC1-08002bE10318}\0001

SpeedDuplex

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class{4D36E972-E325-11CE-BFC1-08002bE10318}\0002

SpeedDuplex

and so on.

You can ues keys of key to iterate through all of the subkeys. Notice that keys is plural and so will return all matching objects under key.

Check this out:

q: values “SpeedDuplex” of keys of key “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class{4D36E972-E325-11CE-BFC1-08002bE10318}” of registry

As far a technique goes, you can even get fancier. For example if you know the name of a key that is further down the tree you can do another layer of key object. If you wanted to find all values under the following set of keys

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class{4D36E972-E325-11CE-BFC1-08002bE10318}???\Ndi\Params\RequestedMediaType

you could use:

q: values of key “NDI\Params\RequestedMediaType” of keys of key “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class{4D36E972-E325-11CE-BFC1-08002bE10318}” of registry

A: Speed & Duplex

A: 0

A: enum

Depending on what you are actually trying to pull, there might be a BES inspector that can directly pull it or you can try out the method suggested above by Martin Forster. Usually it is more efficient to use the inspectors when they exist.

Check here: http://support.bigfix.com/fixlet/documents/WinInspectors-2006-08-10.pdf under the Networking Objects section for ideas and examples.

Cheers,

Brolly

7

(imported comment written by rkc91)

Thanks brolly33 and Martin

I intended to find out first active nic using active devices from HKLM\SYSTEM\CurrentControlSet\Services relating the nic to find it speed from “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class{4D36E972-E325-11CE-BFC1-08002bE10318}” of registry