Regnumkey

[nitron]

Hy to all, 

I am really Sorry to come up with this question but i can't seem to solve the Problem.

Its quite easy, I have been using RegNumKey for Years, but i seemed to lose track of something.

For $ZaehlerLocal = 1 to 1200
      $RegKey = RegEnumKey("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall", $ZaehlerLocal)
      If @error <> 0 then ExitLoop
      $RegKey2=RegRead("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\"&$RegKey,"DisplayName")
      $RegKey3=RegRead("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\"&$RegKey,"UninstallString")
      $RegKey4=RegRead("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\"&$RegKey,"QuietUninstallString")

      if StringInStr($RegKey,"_Office15")==0 and StringInStr($RegKey2,"(German) 2013")==0 and StringInStr($RegKey,".KB")==0 and StringInStr($RegKey2,"Security update")==0 and StringInStr($RegKey2,"Framework")==0 Then
        FileWrite($FileHandleLocal,$RegKey&";")
        FileWrite($FileHandleLocal,$RegKey2&";")
        FileWrite($FileHandleLocal,$RegKey3&";")
        FileWriteline($FileHandleLocal,$RegKey4&";")
     EndIf
   Next
 

Ive been using this to get all uninstall Strings from the Registry but for some reason, this doesn't work anymore. 

I get some keys but not all, nore does it start with the first registry.

As you can see in the picture, the Registry starts with {13DA9C7C-EBFB-40D0-94A1-55B42883DF21}

but RegNumKey starts with Adressbook.

Any Ideas what I am doing wrong? I tried HKLM64 instead as well, but with same result.

Again sorry to bother, but i can't Find the mistake.

 

[Subz]

You could try:

#include <Array.au3>

Global $aUninstall[1][5]

_RegReadUninstall("HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall")
_RegReadUninstall("HKLM64\Software\Microsoft\Windows\CurrentVersion\Uninstall")

_ArraySort($aUninstall, 0, 1, 0, 1)
_ArrayDisplay($aUninstall)

Func _RegReadUninstall($sRegHive = "HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall")
    $i = 1
    While 1
        $sRegKey = RegEnumKey($sRegHive, $i)
            If @error Then ExitLoop
        _ArrayAdd($aUninstall, $sRegHive & '|' & $sRegKey & '|' & RegRead($sRegHive & "\" & $sRegKey, "DisplayName") & "|" & RegRead($sRegHive & "\" & $sRegKey, "UninstallString") & '|' & RegRead($sRegHive & "\" & $sRegKey, "QuietUninstallString"))
        $i += 1
    WEnd
    $aUninstall[0][0] = UBound($aUninstall) - 1
EndFunc

 

Edited January 25, 2018 by Subz
Forgot to add ArraySort

[nitron]

  On 1/25/2018 at 11:15 AM, Subz said:

You could try:

#include <Array.au3>

Global $aUninstall[1][5]

_RegReadUninstall("HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall")
_RegReadUninstall("HKLM64\Software\Microsoft\Windows\CurrentVersion\Uninstall")

_ArrayDisplay($aUninstall)

Func _RegReadUninstall($sRegHive = "HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall")
    $i = 1
    While 1
        $sRegKey = RegEnumKey($sRegHive, $i)
            If @error Then ExitLoop
        _ArrayAdd($aUninstall, $sRegHive & '|' & $sRegKey & '|' & RegRead($sRegHive & "\" & $sRegKey, "DisplayName") & "|" & RegRead($sRegHive & "\" & $sRegKey, "UninstallString") & '|' & RegRead($sRegHive & "\" & $sRegKey, "QuietUninstallString"))
        $i += 1
    WEnd
    $aUninstall[0][0] = UBound($aUninstall) - 1
EndFunc

 

Expand  

Hy, this is nice way to get thinks sorted, but basicly does the same, that my script does. And unfortunatly leaves out the needed keys as well. 

:-(

[Subz]

Forgot to add _ArraySort (see code above), also what other keys did you require?

[nitron]

Edited January 25, 2018 by nitron
The Problem is, that i don't get any of the Keys above Adressbook. All keys beneth but none of the above Adressbook

[Subz]

It actually captures those keys they're just added to the bottom, once you sort the array they'll all appear at the top.

[nitron]

  On 1/25/2018 at 11:29 AM, Subz said:

It actually captures those keys they're just added to the bottom, once you sort the array they'll all appear at the top.

Expand  

I saved the Array to a file, but the Keys were not in that file, nor were the in the Array. For some reason, its not posible to find this key via regnumkey. 

[JLogan3o13]

@nitron that is why I typically use WMI:

Local $oWMI = ObjGet("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
    If IsObj($oWMI) Then
        $aSystem = $oWMI.ExecQuery("Select * from Win32_Product")
            For $oApp In $aSystem
                ConsoleWrite("Application: " & $oApp.Name & " Version: " & $oApp.Version & @CRLF)
            Next
    Else
        ConsoleWrite("Unable to connect to WMI" & @CRLF)
    EndIf

People with debate WMI vs. Registry; neither is perfect, and WMI can run a little slowly, but I find it less of a headache.

[Subz]

Strange it works for me, I get 700 keys from both HKLM and HKLM64 and can verify thats the correct number of subkeys, maybe you require #RequireAdmin at the top of your script.

[nitron]

  On 1/25/2018 at 12:43 PM, Subz said:

Strange it works for me, I get 700 keys from both HKLM and HKLM64 and can verify thats the correct number of subkeys, maybe you require #RequireAdmin at the top of your script.

Expand  

I do understand that it is hard to get, but for some reason its wont Work on 400 pc any more. 

 

Edited January 25, 2018 by nitron
But thanks for your try! I apreachate it

[nitron]

  On 1/25/2018 at 12:38 PM, JLogan3o13 said:

@nitron that is why I typically use WMI:

Local $oWMI = ObjGet("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
    If IsObj($oWMI) Then
        $aSystem = $oWMI.ExecQuery("Select * from Win32_Product")
            For $oApp In $aSystem
                ConsoleWrite("Application: " & $oApp.Name & " Version: " & $oApp.Version & @CRLF)
            Next
    Else
        ConsoleWrite("Unable to connect to WMI" & @CRLF)
    EndIf

People with debate WMI vs. Registry; neither is perfect, and WMI can run a little slowly, but I find it less of a headache.

Expand  

Thanks, that works Fine!!! I still have to retrive the unsinstall key from registry, but at leas all Programs are found!

Thanks

[Earthshine]

Did you try #RequireAdmin at the top of your script?

[careca]

I get those entries if i use:

_RegReadUninstall('HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall')

 

[Earthshine]

 He’s obviously got permissions problem 

 

[nitron]

A

  On 1/25/2018 at 2:24 PM, Earthshine said:

 He’s obviously got permissions problem 

 

Expand  

No, since I use a special Admin User aexactly for this quest. But even if do it with domain rights, it won't work.

[Earthshine]

I’ll test it when I get to my desk

[nitron]

  On 1/25/2018 at 12:38 PM, JLogan3o13 said:

@nitron that is why I typically use WMI:

Local $oWMI = ObjGet("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
    If IsObj($oWMI) Then
        $aSystem = $oWMI.ExecQuery("Select * from Win32_Product")
            For $oApp In $aSystem
                ConsoleWrite("Application: " & $oApp.Name & " Version: " & $oApp.Version & @CRLF)
            Next
    Else
        ConsoleWrite("Unable to connect to WMI" & @CRLF)
    EndIf

People with debate WMI vs. Registry; neither is perfect, and WMI can run a little slowly, but I find it less of a headache.

Expand  

One more remark. With WMI i got all Software entries. But, it just worked with Adminrights. The Second it was run in normal account, it dropped the other Software parts as well. I now use Powershell. witch doesn't seem to care, what account you use.

[Earthshine]

your business can regulate permissions down to a key in the registry if they want to, mostly through Group Policy. You have some permissions issues as a user, but somehow, they let Powershell have Admin. hmmmm

[careca]

@nitron did you try what i suggested? what do you get? You see, i have all permissions, but only get all entries when i run it with that registry path.

[nitron]

  On 2/1/2018 at 7:42 PM, careca said:

@nitron did you try what i suggested? what do you get? You see, i have all permissions, but only get all entries when i run it with that registry path.

Expand  

Yes, I did. For some Reason only a few key are collected. I tried wow64... etc... I tried HKLM64... i tried it i all difrent variations. For some reason, any reg key above Adressbook is ignored. I do it with Powershell now. at least that works, even though i don't like mixinig scripts.