Custom Inventory Rule - Retrieve DWORD value
I am having some issues with a Custom Inventory Rule and could use some extra set of eyes on what I have so far as it is not returning any values. I've also looked at several articles in here, but still not clear to me as to what I'm doing wrong.
So far, I have the following created:
- Created CIR under the "Software" section containing the inventory rule limited to Windows 10 only (Searching for a DWORD registry value)
RegistryValueReturn(HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield\SweepTimes,AllSweepsCompleted,text)
- Created a manual label
- Created a Smart Label targeting a specific machine (I see the label applied to the system)
However, no values are showing up in the Custom Inventory Field. I have also tried creating spaces between the registry value as well as the type (text) as well as tried changing the type to upper case and NUMBER with no avail.
In addition, I was wondering if there is 1) a way to test this script outside of KACE (i.e. powershell, command line, etc.) and 2) what logs can I view that shows if the CIR is attempting execution and is passing/failing? Can those logs be collected using "Choose Action" --> "Upload Agent Files" within that systems inventory record? Thanks in advance for any assistance.
Version of SMA?
Version of the Agent?
The CIR runs at inventory, has an inventory occurred? - KevinG 4 years ago
The OS should be targeting any Windows 10 version. Mostly 64-bit, but I am not excluding the 32-bit at this time.
SMA is 10.2.234
Agent is 10.2.108
Inventory has occurred, but no luck. Label was applied on Friday 9/4/2020. Is a label required to be applied to a system for the CIR to run?
Best Regards,
David - ddihel 4 years ago
RegistryValueReturn(HKLM64\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield\SweepTimes,AllSweepsCompleted,text)
RegistryValueReturn(HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield\SweepTimes,AllSweepsCompleted,text) - ddihel 4 years ago
RegistryValueReturn(HKLM64\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield\SweepTimes,AllSweepsCompleted,text) OR RegistryValueReturn(HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield\SweepTimes,AllSweepsCompleted,text) - n1md4 4 years ago