Reading a Remote Registy

[ioliver]

I'm looking for a way to read a value from the Registry on another computer on my network that I have Administrative Rights to. I read a post about having the latest unstable version of Autoit, so I downloaded it, and about using \\ComputerName in the REGREAD command, so I tried this, but it's not working.

What I trying to do is have a scipt that will check the Registy for all the computers on my Network and report there SUS (Auto-Update) settings to a txt file, or csv file.

So if anyone can help me to read a remote registry, or if anyone already has a script that does this, please let me know.

Thanks for your help, and thanks to the developers of Autoit for making a great product.

Ian

[Doxie]

Hi,

I know there is a way to read the REG from a computer on the network, but i have no idea how you do it

Instead i wanna suggest a alternative solution for this.

Make a AU3 file that collect the data needed from the computer.

Example: (Will check the start page of internet explorer.

$var = RegRead("HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main", "Start Page")

Then you make the script write the info to a .ini or .txt file on a network share.

Example:

IniWrite("\\server\share\" & @Computername & ".txt", "Internet", "Startpage",$var )

Compile this script to a .EXE file, and add it to the users login script.

Then it will run once everytime they login. If they aint using login script, but it in "Autostart".

Then you create a AU3 script, that you will be using on your machine.

That will read all the @Computername files created on the share, you can then have it as messagebox, splash screen or even nice listed directly on .txt file.

I'm using this at my office and it works perfectly.

I can see:

If they have disabled Antivirus

If they have disabled BlackIce (FireWall for VPN)

If they have low diskspace

etc...

I have the script in my autostart, so every morning i can see the status of my users computer.

There is many differnt ways you can do this, my script is a bit more complicated then above, but i just gave you the idea

[ioliver]

Doxie, thanks for the reply. But I want to be able to do is run this script from my computer and have it check all remote PCs.

Thanks again,

Ian

[Doxie]

Ok, then you can try to use the REG.EXE file.

The REG file is built-in XP, but comes with 2000 Resource Kit Tools.

If you need the file, you can get it from me.

So how do you use the file?

I will explain how it works, as REG.EXE, not how to use with AU3, that

you have to figure out by yourself (can´t be that hard)

First you make sure the REG.EXE file is in YOUR system32 folder.

Then you use command window (CMD) and enter:

For Example

C:\>REG QUERY HKLM\Software\

It will then print out:

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\Software\

HKEY_LOCAL_MACHINE\Software\\ACE Compression Software

HKEY_LOCAL_MACHINE\Software\\Adobe

HKEY_LOCAL_MACHINE\Software\\Ahead

HKEY_LOCAL_MACHINE\Software\\Apple Computer, Inc.

HKEY_LOCAL_MACHINE\Software\\ATI Technologies

HKEY_LOCAL_MACHINE\Software\\ATI Technologies Inc.

etc etc etc....... All keys you got in Software.....

"Only HKLM and HKU are available on remote machines"

You can also REG ADD, REG DELETE, REG COPY, REG SAVE

Hope this will help

EDIT

I forgot to tell you have to use it on remote

REG QUERY \\ComputerName\hklm\software

Edited July 16, 2004 by Doxie

[ioliver]

Thanks Doxie, I'll try that.

[edy]

With autoit autoit-v3.0.102 unstable, this example to reading a remote

registry work for me:

$var=RegRead ("\\pcname\HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters\RFC1156Agent","sysContact")

[emmanuel]

you might want to talk to the creator of Registry Editor PE, I recall his coming here occasionally and must know lots about remote registry manipulation via autoit...

Sidenote, I don't see anything in the helpfile re: reading registry from \\computername.

[edy]

you might want to talk to the creator of Registry Editor PE, I recall his coming here occasionally and must know lots about remote registry manipulation via autoit...

Sidenote, I don't see anything in the helpfile re: reading registry from \\computername.

If you look in the autoit help file, latest unstable version,section "history/changelog" you find:

---------------------------------------------------------------------------------------------------

Changed: Remote registry keys are accepted in the form "\\computername\key\subkey" (works for NT/XP/2000 needs additional software on 9x)

---------------------------------------------------------------------------------------------------

bye

Ros

[emmanuel]

If you look in the autoit help file, latest unstable version,section  "history/changelog"

silly me, expecting Jon to update the helpfile entries...

[Doxie]

Someone directs emmanuel (help file guru) to look into the help file.

Very amusing

Ian > Since i got sooooo much to do.....

I'm now working on GUI script, that will Query the Registry.

I thought it could be usefull for me aswell.

Maybe someone can tell me how i make a Combobox, wich will show the different result depending on what you chose from a earlier Combobox.

Combo1

Windows

Linux

Combo2a

98

XP

Combo2b

Mandrake

Red Hat

You got the point?

If i chose windows in combo one, it will show 98 and XP in the second box,

and then of course if i chose Linux it will show Mandrake and Red Hat.

I will need this to make the query more easy.

Since you can only Query HKLM and HKU it will not be that work.

Combo1

HKLM

HKU

Combo2a

HARDWARE

SAM

SECURITY

SOFTWARE

SYSTEM

Combo2b

.DEFAULT

;Some classes

Input

Here you enter the key for the query.