{"id":259,"date":"2008-02-14T08:00:00","date_gmt":"2008-02-14T16:00:00","guid":{"rendered":"http:\/\/www.sapien.com\/blog\/2008\/02\/14\/read-remote-registry-function\/"},"modified":"2008-04-24T13:26:19","modified_gmt":"2008-04-24T21:26:19","slug":"read-remote-registry-function","status":"publish","type":"post","link":"https:\/\/dev.sapien.com\/blog\/2008\/02\/14\/read-remote-registry-function\/","title":{"rendered":"Read Remote Registry Function"},"content":{"rendered":"

Hopefully you found my last entry<\/a> valuable. But I always like to take things a step further, especially when it comes to scripting and automation. So I turned my last script into a function that returns the value of a specified registry key. Here’s a sample script ( ) that uses the function:<\/p>\n

‘ NAME: ReadRegistryFunctionDemo.vbs
\n’ VERSION: 1.0 2\/7\/2008
\n’ AUTHOR: Jeffery Hicks jhicks@sapien.com
\n’ USAGE: cscript ReadRegistryFunctionDemo.vbs <\/font><\/p>\n

’ DESCRIPTION: Use the WMI registry provider to read a remote
\n’ registry key value. This sample script parses an array of
\n’ server names and returns a CSV line of results. You could
\n’ easily revise this script to write the results to a text
\n’ file. <\/font><\/p>\n

’*********************************************************************************
\n’* THIS PROGRAM IS OFFERED AS IS AND MAY BE FREELY MODIFIED OR ALTERED AS *
\n’* NECESSARY TO MEET YOUR NEEDS. THE AUTHOR MAKES NO GUARANTEES OR WARRANTIES, *
\n’* EXPRESS, IMPLIED OR OF ANY OTHER KIND TO THIS CODE OR ANY USER MODIFICATIONS. *
\n’* DO NOT USE IN A PRODUCTION ENVIRONMENT UNTIL YOU HAVE TESTED IN A SECURED LAB *
\n’* ENVIRONMENT. USE AT YOUR OWN RISK. *
\n’*********************************************************************************
\nOn Error Resume Next
\n‘this script demo assumes the registry keys will not return multi-line values <\/font><\/p>\n

‘the registry path to query
\nstrKeyPath =”Software\\Microsoft\\Windows NT\\CurrentVersion” <\/font><\/p>\n

‘create an array of computers to query. You could just
\n‘as easily use the FileSystemObject to read a list of
\n‘computer names.
\narrComputers=Array(“server01”,”server02”,”server03”,”server04”) <\/font><\/p>\n

‘this is a comma separated list of registry values to read
\n‘under the registry path specified above
\nstrNames=”RegisteredOwner,RegisteredOrganization,ProductName” <\/font><\/p>\n

‘turn the list into an array
\narrNames=Split(strNames,”,”) <\/font><\/p>\n

WScript.Echo “Computer,” & strNames
\nFor Each strComputer In arrComputers
\nstrLine= UCase(strComputer)
\n‘get values for each registry key name
\nFor Each strValueName In arrNames
\n‘build a result string separated by commas. I use
\n‘quotes “” around each returned value just in case
\n‘the value has a comma
\nstrLine=strLine & “,” & Chr(34) &_
\nTrim(GetRegistryValue(strComputer,strKeyPath,strValueName)) &_
\nChr(34)
\nNext
\n‘display the result
\nWScript.Echo strLine
\nNext <\/font><\/p>\n

‘end main script <\/font><\/p>\n

Function GetRegistryValue(strComputer,strKeyPath,strValueName) <\/font><\/p>\n

On Error Resume Next <\/font><\/p>\n

Const HKEY_LOCAL_MACHINE = &H80000002
\nConst REG_SZ = 1
\nConst REG_EXPAND_SZ = 2
\nConst REG_BINARY = 3
\nConst REG_DWORD = 4
\nConst REG_MULTI_SZ = 7 <\/font><\/p>\n

Set objReg=GetObject(“winmgmts:{impersonationLevel=impersonate}!\\” &_
\nstrComputer & “\\root\\default:StdRegProv”)
\nIf Err.Number 0 Then
\n‘you can uncomment this section if you want to see the error message
\n‘ strMsg=”There was a problem connecting to ” &_
\n‘ strComputer & “\\root\\default:StdRegProv” & VbCrLf &_
\n‘ “Error ” & Err.Number & ” ” & Err.description
\n‘ WScript.echo strMsg
\nGetRegistryValue = “NotFound”
\nExit function
\nEnd If <\/font><\/p>\n

objReg.EnumValues HKEY_LOCAL_MACHINE, strKeyPath, arrValues, arrTypes
\nFor x=0 To UBound(arrValues)-1
\nif Ucase(arrValues(x)) = UCase(strValueName) Then <\/font><\/p>\n

Select Case arrTypes(x)
\nCase REG_SZ
\nobjReg.GetStringValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,strValue
\nCase REG_EXPAND_SZ
\nobjReg.GetExpandedStringValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,strValue
\nCase REG_BINARY
\nobjReg.GetBinaryValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,strValue
\nCase REG_DWORD
\nobjReg.GetDWORDValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,strValue
\nWscript.Echo
\nCase REG_MULTI_SZ
\nobjReg.GetMultiStringValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,strValue
\nEnd Select
\nEnd If <\/font><\/p>\n

Next <\/font><\/p>\n

If VarType(strValue)=0 Then
\nstrData=”NotFound”
\nElse
\nIf IsArray (strValue) Then
\nFor Each value In strValue
\nstrData = strData & VbCrLf & value
\nNext
\nElse
\nstrData = strValue
\nEnd If
\nEnd If <\/font><\/p>\n

GetRegistryValue = strData <\/font><\/p>\n

End Function <\/font><\/p>\n

‘EOF<\/font><\/p>\n

The demo script will parse an array of computer names and registry keys and return a comma separated value like this:<\/p>\n

Computer,RegisteredOwner,RegisteredOrganization,ProductName
\nGODOT,”Jeffery Hicks”,”SAPIEN Technologies”,”Microsoft Windows XP”
\n<\/font>PUCK,”Jeffery Hicks”,”SAPIEN Technologies”,”Windows Vista (TM) Ultimate”<\/font><\/p>\n

I think you see where this is going. You could easily revise the script to send the output to a CSV text file using the FileSystemObject. Look through the rest of the script comments to understand what each section is doing.<\/p>\n

Technorati Tags: <\/span>Registry<\/span><\/a>, <\/span>VBScript<\/span><\/a>, <\/span>Scripting<\/span><\/a>, <\/span>FileSystemObject<\/span><\/a><\/div>\n","protected":false},"excerpt":{"rendered":"

Hopefully you found my last entry valuable. But I always like to take things a step further, especially when it comes to scripting and automation. So I turned my last script into a function that returns the value of a specified registry key<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[24],"tags":[67,68,59,31,36,57,58,996,35],"class_list":["post-259","post","type-post","status-publish","format-standard","hentry","category-vbscript","tag-array","tag-csv","tag-hklm","tag-registry","tag-remote","tag-scripting","tag-stdregprov","tag-vbscript","tag-wmi"],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/posts\/259","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/comments?post=259"}],"version-history":[{"count":0,"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/posts\/259\/revisions"}],"wp:attachment":[{"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/media?parent=259"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/categories?post=259"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dev.sapien.com\/blog\/wp-json\/wp\/v2\/tags?post=259"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}