Client Authentication/Authorization via ISE & AD, Posture Registry Key, and mapped to specific DHCP scope by AD membership

Hi Team,
I'm currently working on a configuration entailing WLC and ISE where the customer wants a single SSID,and wants his wireless clients to authenticate successfully if they pass a registry key compliance. Additionally, they want clients to received a different IP address or get mapped to a different DHCP scope based on the Microsoft AD group they belong too. for example:
Client authenticating with registry key and in AD group ABC that passes authentication gets IP address or subnet for AD group ABC.
Client authenticating with registry key and in AD group XXX that passes authentication gets IP address or subnet for AD group XXX.
Clients---->WLC------>ISE-----> MS AD ( groups ABC, XXXX, YYY )
currently using EAP-PEAP/MSCHAPv2
Does anyone have any idea or pointers or can refer me somewhere that I can read on how to accomplish this? Not sure on how to do the registry compliance check nor what attributes will allow me to map the client to a DHCP Scope based on this AD group membership?
Thanks...

Do check cisco how to guides you will get step by step configuration of the current requirement

Similar Messages

Take ownership of a registry key, and change permissions

Hello,
I am writing a powershell script to configure a W2008-R2 Server. In one of the steps, I need to take ownership of an existing registry key, and then give full control permissions to the administrators.
I have done this:
$acl = Get-Acl $key
$me = [System.Security.Principal.NTAccount]"$env:userdomain\$env:username"
$acl.SetOwner($me)
$person = [System.Security.Principal.NTAccount]"Administrators"
$access = [System.Security.AccessControl.RegistryRights]"FullControl"
$inheritance = [System.Security.AccessControl.InheritanceFlags]"None"
$propagation = [System.Security.AccessControl.PropagationFlags]"None"
$type = [System.Security.AccessControl.AccessControlType]"Allow"
$rule = New-Object System.Security.AccessControl.RegistryAccessRule($person,$access,$inheritance,$propagation,$type)
$acl.AddAccessRule($rule)
Set-Acl $key $acl
But it fails in "set-acl" command, with the message "Set-Acl : Requested registry access is not allowed."
Any ideas of how to do this? or if it is even possible?
Thank you!

Here is the code to take ownership of a registry key. You first need to set the SeTakeOwnership permission on your process
The enable-privilege function is taken from a posting by Lee Holmes (http://www.leeholmes.com/blog/2010/09/24/adjusting-token-privileges-in-powershell/), but
I've been meaning to get around to tidy it up a bit for my purposes. Perhaps this thread is the motivation I need to do this. I should also note that the PowerShell Community Extensions has cmdlets to work with tokens already.
I also never tested whether you can do the PowerShell native methods of get-acl set-acl if you set the token. I don't have time to play with that now, but if you want to try it and let us know if it works that would be great. The opensubkey method
I'm using I've documented here for changing permissions when you don't have permissions: http://powertoe.wordpress.com/2010/08/28/controlling-registry-acl-permissions-with-powershell/
function enable-privilege {
param(
## The privilege to adjust. This set is taken from
## http://msdn.microsoft.com/en-us/library/bb530716(VS.85).aspx
[ValidateSet(
"SeAssignPrimaryTokenPrivilege", "SeAuditPrivilege", "SeBackupPrivilege",
"SeChangeNotifyPrivilege", "SeCreateGlobalPrivilege", "SeCreatePagefilePrivilege",
"SeCreatePermanentPrivilege", "SeCreateSymbolicLinkPrivilege", "SeCreateTokenPrivilege",
"SeDebugPrivilege", "SeEnableDelegationPrivilege", "SeImpersonatePrivilege", "SeIncreaseBasePriorityPrivilege",
"SeIncreaseQuotaPrivilege", "SeIncreaseWorkingSetPrivilege", "SeLoadDriverPrivilege",
"SeLockMemoryPrivilege", "SeMachineAccountPrivilege", "SeManageVolumePrivilege",
"SeProfileSingleProcessPrivilege", "SeRelabelPrivilege", "SeRemoteShutdownPrivilege",
"SeRestorePrivilege", "SeSecurityPrivilege", "SeShutdownPrivilege", "SeSyncAgentPrivilege",
"SeSystemEnvironmentPrivilege", "SeSystemProfilePrivilege", "SeSystemtimePrivilege",
"SeTakeOwnershipPrivilege", "SeTcbPrivilege", "SeTimeZonePrivilege", "SeTrustedCredManAccessPrivilege",
"SeUndockPrivilege", "SeUnsolicitedInputPrivilege")]
$Privilege,
## The process on which to adjust the privilege. Defaults to the current process.
$ProcessId = $pid,
## Switch to disable the privilege, rather than enable it.
[Switch] $Disable
## Taken from P/Invoke.NET with minor adjustments.
$definition = @'
using System;
using System.Runtime.InteropServices;
public class AdjPriv
[DllImport("advapi32.dll", ExactSpelling = true, SetLastError = true)]
internal static extern bool AdjustTokenPrivileges(IntPtr htok, bool disall,
ref TokPriv1Luid newst, int len, IntPtr prev, IntPtr relen);
[DllImport("advapi32.dll", ExactSpelling = true, SetLastError = true)]
internal static extern bool OpenProcessToken(IntPtr h, int acc, ref IntPtr phtok);
[DllImport("advapi32.dll", SetLastError = true)]
internal static extern bool LookupPrivilegeValue(string host, string name, ref long pluid);
[StructLayout(LayoutKind.Sequential, Pack = 1)]
internal struct TokPriv1Luid
public int Count;
public long Luid;
public int Attr;
internal const int SE_PRIVILEGE_ENABLED = 0x00000002;
internal const int SE_PRIVILEGE_DISABLED = 0x00000000;
internal const int TOKEN_QUERY = 0x00000008;
internal const int TOKEN_ADJUST_PRIVILEGES = 0x00000020;
public static bool EnablePrivilege(long processHandle, string privilege, bool disable)
bool retVal;
TokPriv1Luid tp;
IntPtr hproc = new IntPtr(processHandle);
IntPtr htok = IntPtr.Zero;
retVal = OpenProcessToken(hproc, TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, ref htok);
tp.Count = 1;
tp.Luid = 0;
if(disable)
tp.Attr = SE_PRIVILEGE_DISABLED;
else
tp.Attr = SE_PRIVILEGE_ENABLED;
retVal = LookupPrivilegeValue(null, privilege, ref tp.Luid);
retVal = AdjustTokenPrivileges(htok, false, ref tp, 0, IntPtr.Zero, IntPtr.Zero);
return retVal;
$processHandle = (Get-Process -id $ProcessId).Handle
$type = Add-Type $definition -PassThru
$type[0]::EnablePrivilege($processHandle, $Privilege, $Disable)
enable-privilege SeTakeOwnershipPrivilege
$key = [Microsoft.Win32.Registry]::LocalMachine.OpenSubKey("SOFTWARE\powertoe",[Microsoft.Win32.RegistryKeyPermissionCheck]::ReadWriteSubTree,[System.Security.AccessControl.RegistryRights]::takeownership)
$acl = $key.GetAccessControl()
$me = [System.Security.Principal.NTAccount]"t-alien\tome"
$acl.SetOwner($me)
$key.SetAccessControl($acl)
http://twitter.com/toenuff
write-host ((0..56)|%{if (($_+1)%3 -eq 0){[char][int]("116111101110117102102064103109097105108046099111109"[($_-2)..$_] -join "")}}) -separator ""

Read Registry Keys and store it in Inventory DB

Hallo together,
I am looking for a program to extract some Registry keys into the ZENworks 7 inventory database.
I know I need to create a CUSTOM.INI and fill it with values. When I create the CUSTOM.INI by hand I got it to work to store the values in the inventory database.
But I need a program to read the Registry values and store them in the CUSTOM.ini file with the correct syntax.
A Script or any other small program would be helpful. I know how I could read the Registry values with REG.exe but I do not know how to store the values in the correct syntax in CUSTOM.ini?
I found zRegScan but I did not get it to work. I found out that the Program is called by the Inventory process (it appears in the TaskManager for a short time). When I run zRegScan by hand (or with a manual launched ZfDInvScanner.exe) I get the following error windows:
Title: zRegScan.exe - Common Language Runtime Debugging Services
Warning: Application has generated an exception that could not be handled. Process id=0x814, Thread id=0xf14
When I click "Cancel" I receive a 2nd Window:
Title: zRegScan.exe - No debugger found.
Warning: Registered JIT debugger is not available. An atempt to launch a JIT debugger with ...
I tried for several hours to get it operational - with no success.
The zRegScan.log does not show anything helpful.
I have WinXP SP2 and SP3 machines and ZfD7ir3a.
Thanks for your help
Klaus

BachmannK,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Cannot open registry key and /usr/bin/lib: invalid option --N patch 7237313

Hi,
I am trying to install autoconfig TXK patch 7237313 for cloning an EBS 12 on windows server 2003.
When I run adpatch it returns 2 errors:
*1 -*
setEnvAdrelink: Error: Cannot open registry key:
SOFTWARE\ORACLE
*2 -*
Relinking module 'CONCSUB.exe' in product fnd ...
gnumake -f E:/oracle/PROD/apps/apps_st/appl/admin/PROD/out/link_fnd_2548.mk E:/o
racle/PROD/apps/apps_st/appl/fnd/12.0.0/bin/CONCSUB.exe
Starting link of fnd executable 'CONCSUB.exe' on Fri Feb 5 09:25:07 SAST 2010
/usr/bin/lib: invalid option -- N
Try `/usr/bin/lib --help' for more information.
E:/oracle/PROD/apps/apps_st/appl/admin/PROD/out/link_fnd_2548.mk:2901: warning:
overriding commands for target `E:/oracle/PROD/apps/apps_st/appl/fnd/12.0.0/bin/
CMDCART.dll'
E:/oracle/PROD/apps/apps_st/appl/admin/PROD/out/link_fnd_2548.mk:752: warning: i
gnoring old commands for target `E:/oracle/PROD/apps/apps_st/appl/fnd/12.0.0/bin
/CMDCART.dll'
E:/oracle/PROD/apps/apps_st/appl/admin/PROD/out/link_fnd_2548.mk:2948: warning:
overriding commands for target `E:/oracle/PROD/apps/apps_st/appl/fnd/12.0.0/bin/
FNDRTR45.exe'
E:/oracle/PROD/apps/apps_st/appl/admin/PROD/out/link_fnd_2548.mk:1333: warning:
ignoring old commands for target `E:/oracle/PROD/apps/apps_st/appl/fnd/12.0.0/bi
n/FNDRTR45.exe'
link.exe -MAP:E:/oracle/PROD/apps/apps_st/appl/fnd/12.0.0/bin/CONCSUB.map -NODEF
AULTLIB -NOLOGO -SUBSYSTEM:CONSOLE -ENTRY:mainCRTStartup -OUT:E:/oracle/PROD/app
s/apps_st/appl/fnd/12.0.0/bin/CONCSUB.exe E:/oracle/PROD/apps/apps_st/appl/fnd/1
2.0.0/lib/fdpocr.obj \
E:/oracle/PROD/apps/apps_st/appl/fnd/12.0.0/lib/FNDCORE.lib E:/oracle/PR
OD/apps/tech_st/10.1.2/precomp/lib/msvc/orasql10.lib E:/oracle/PROD/apps/tech_st
/10.1.2/precomp/lib/msvc/orasqx10.lib E:/oracle/PROD/apps/tech_st/10.1.2/RDBMS/l
ib/oraclient10.lib E:/oracle/PROD/apps/tech_st/10.1.2/RDBMS/lib/oracommon10.lib
E:/oracle/PROD/apps/tech_st/10.1.2/NETWORK/lib/oranro10.lib E:/oracle/PROD/apps/
tech_st/10.1.2/NETWORK/lib/oran10.lib E:/oracle/PROD/apps/tech_st/10.1.2/NETWORK
/lib/oranl10.lib E:/oracle/PROD/apps/tech_st/10.1.2/lib/oranls10.lib E:/oracle/P
ROD/apps/tech_st/10.1.2/lib/oracore10.lib /LIB/MSVCRT.LIB /LIB/OLDNAMES.LIB /P
latformSDK/LIB/KERNEL32.LIB /PlatformSDK/LIB/USER32.LIB /PlatformSDK/LIB/ADVAPI3
2.LIB /PlatformSDK/LIB/WINSPOOL.LIB /PlatformSDK/LIB/COMDLG32.LIB /PlatformSDK/L
IB/GDI32.LIB /PlatformSDK/LIB/VERSION.LIB
link: invalid option -- M
Try `link --help' for more information.
gnumake: *** [E:/oracle/PROD/apps/apps_st/appl/fnd/12.0.0/bin/CONCSUB.exe] Error
1
Done with link of fnd executable 'CONCSUB.exe' on Fri Feb 5 09:25:08 SAST 2010
Relink of module "CONCSUB.exe" failed.
See error messages above (also recorded in log file) for possible
reasons for the failure. Also, please check that the Unix userid
running adrelink has read, write, and execute permissions
on the directory E:/oracle/PROD/apps/apps_st/appl/fnd/12.0.0/bin,
and that there is sufficient space remaining on the disk partition
containing your Oracle Applications installation.
egrep version is 2.5.1 and gnumake is 3.80.
please help,
regards,
Hassane Cabir

Hi,
Are the application services down?
setEnvAdrelink: Error: Cannot open registry key:
SOFTWARE\ORACLEyes, the services are down, using adstpall.cmd and Maintenance mode enabled using adadmin.
Get the version 3.80-1 of the make file -- See (Note: 414992.1 - Using Cygwin to Maintain Oracle E-Business Suite Release 12 on Windows).The make is already 3.80-1.
regards,
Hassane Cabir

Can ZEN look for registry keys and modify them?

I found some registry keys I need to change. But they are in the HK_USERS
section of the registry which will be different on every PC. Can I make ZEN
search for the key name and change it fi found?
[HKEY_USERS\S-1-5-21-2238441965-2819776847-193749584-1006\Software\Novell\GroupWise\Address
Book - User Interface\RFQ Options]
"Auto Delete Enabled"="Yes"
"Save Received from Internal"="No"
"Save Sent to Internal"="No"
"Auto Delete - Amount"=dword:00000001
"Auto Delete - Units"="Weeks"
[HKEY_USERS\S-1-5-21-2238441965-2819776847-193749584-1006\Software\Novell\GroupWise\Address
Book - User Interface\Search Books]
@="Selected List, Manual RFQ"
"AB.4E6F76656C6C47576162703139393500.Novell GroupWise Address
Book"=dword:00000000
"AB.0081D836918BCE1187EB00805FB4B2BE.Frequent Contacts"=dword:00000001

Robin Witkop-Staub,
> I found some registry keys I need to change. But they are in the HK_USERS
> section of the registry which will be different on every PC. Can I make ZEN
> search for the key name and change it fi found?
But they should be the same for CURRENT_USER. Ie HKEY_USERS is just all users'
keys.
- Anders Gustafsson, Engineer, CNE6, ASE
NSC Volunteer Sysop
Pedago, The Aaland Islands (N60 E20)
Novell does not monitor these forums officially.
Enhancement requests for all Novell products may be made at
http://support.novell.com/enhancement
Using VA 5.51 build 315 on Windows 2000 build 2195

MacBook Pro 15 with Windows 8.1 installed via Boot Camp problem with keys "@" and " " of the keyboard

Hello,
I have a MacBook Pro Retina Maverick in 2013 on which I installed Windows via Boot Camp 8.1.
The installation went well but when I am running Windows 8.1, I have a problem with "@" and "<" keys on the keyboard.
When I type the "@" key, I get "<"
When I type the "<" button, I get "@"
I have reinstall Boot Camp from Windows 8.1 for reinstall the drivers and see if it would solve the problem but it was not the case.
Someone of you has he encountered the same problem?
Thank you.

The language of my Keyboard is French

SOAP sender adapter with client authentication

Hi,
Can you please tell me the steps to be followed to configure SOAP sender adpater for HTTPS with client authentication.
Thanks

Hello,
Check out this SAP NOTE
[Note 891877 - Message-specific configuration of HTTP-Security|https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=891877]
Check out below blog for step by step process.
/people/rahul.nawale2/blog/2006/05/31/how-to-use-client-authentication-with-soap-adapter
Hope this will help.
Nilesh
Edited by: Nilesh Kshirsagar on May 28, 2009 11:31 AM

Adding a Registry Key via Group Policy on Windows server 2008 R2

Hi all;
I need to add the following Registry Key and values to several PCs across the network, I tried doing so via a logon script and via Registry Preferences through GP but it didn't work!
Method 1: Logon script:
regedit.exe /S \\bbk-files\BBK Templates\slxbasic.reg
The slxbasic.reg contains the following:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\SalesLogix\ADOLogin\Connection1]
"Alias"="BBKSLX_PRODUCTION"
"Provider"="SLXOLEDB.1"
"Initial Catalog"="BBKSLX_PRODUCTION"
"Data Source"="BBK-SLX1"
"DBUser"=""
"Extended Properties"="PORT=1706;LOG=ON"
Method 2: GP Preference:
I add the above mentioned values via the GP Preference for the Registry and still didn't work, I also tried the Registry wizard and imported the required Registry info from another PC and still didn't work.
When I check the GP result for the required PCs, I see that the GP is applied, but when I check the registry, I don't find the required values their!
Please help.

Hi,
>>When I'm processing a GP results report, I'm processing it for a certain PC and a certain user, and I look at the User's applied policies and I can find the policy
there.
How is the issue going? Are we still unable to see the value in the Registry?
>>Users have permissions on the shred drive and can navigate to the location and run the .reg file manually.
After we ran the script manually, did we check the Registry to see if the value had been changed?
Best regards,
Frank Shen

Registry key 'Software\JavaSoft\Java Runtime Environment\CurrentVersion'

Server and client are compiled under jsdk 1.3. After a crash on NT workstation installed jsdk 1.4 on it alone. (Did not recompile client to 1.4) All has been well for first few times I ran client on the machine with 1.4 installed. Then client refused to start with following message:
Registry key 'Software\JavaSoft\Java Runtime Environment\CurrentVersion'
has value '1.4', but '1.3' is required.
Error: could not find java.dll
Error: could not find Java 2 Runtime Environment.
Ideas?

I am guessing after installed jsdk1.4, you ran a few tests on the client before restarting the machine, so your java classes are still happy without knowing the registry key has changed. Then after restart, the registry has been picked up and there you go the complaint.
I am also guessing JDK1.3 compiled classes should still works in JDK1.4 environment without recompiled, at least in most of the cases. The registry check is some kind of JVM protection agaisnt version misuse. ??
But all are guessing.
--lichu

Skype corrupted registry keys (?) and error 1603

The predecessor version to the 6.22.64.107 version had error code 1603. The error code basically stated that there was an error with the registry keys. I never found the solution to the problem. I think it was either the registry keys failing to completely uninstall, they were corrupted or it was both of them. I asked for help wherever I could ask for it and I got none; all the responses were the typical, generic ones that said to re-install Skype, linked me to past people's problems with the same issue. It got very frustrating.
I figured that if I tried installing the new version of Skype I would get my Skype back (I've been Skype free since about September now) as the registry keys may be different for it.
I tried re-installing the new Skype today using Google Chrome, but the Skype file that opened up was the "SkypeSetUpFull" as opposed to the "Skypesetup", that was supposed to show. I got the same "error code 1603" message and Skype failed to install.
So, I went on to Internet Explorer to try to install the newest, updated Skype. I got the same Skype error as above.
Screenshots from the original error:
[img]http://up.artificialanimation.com/images/skype_error_1-1417818367.png[/img]
[img]http://up.artificialanimation.com/images/skype_error_2-1417818393.png[/img]
[img]http://up.artificialanimation.com/images/skype_error_3-1417818422.png[/img]
I'd appreciate the help in finally fixing this registry key error of mine. Please help if you can.

I really do apologize for my recent inactivity. I'm back now and I'd like to solve this issue once and for all.
I've tried the above (except for the hotfixes because I do not know how they work) and nothing's worked.
I've tried the generic help solutions and nothing's worked. I believe the issue is with registry keys or with corrupted registry keys and missing startup software.
I have a question that needs an answer:
In an effort to completely remove Skype from my system, I removed its startup software from the startup list on CCleaner. Subsequently, whenever I try to install Skype from the official Skype website or any other site, the installer that I'm presented with is "SkypeSetUpFull" and not "Skypesetup".
Is there any way to fix this error?

Correct Import Server Registry Key

Zenworks 6.5, Zen 6.5 agent on the local workstation.
I have been troubleshooting some issues with workstation import at several
schools. I need to import the workstations to each schools container, so I
push the registry key to the workstation for the import server IP.
I am pushing this key HKLM/SOFTWARE/Novell/ZENworks/ZENWSREG with the
string value ImportServer = x.x.x.x
I have a local admin who has tried this (upgrade from Zen 4.x to Zen 6.5)
and hasn't been able to get it to work. He has configured another registry
key, and it does seem to work.
This is the other key - HKLM/SOFTWARE/Novell/Workstation Manager/Import
Server with the value as the IP address for the import server.
I thought the ZENWSREG key was the correct key, and everything I have read
on the forum indicates this.
Any ideas why the Workstation Manager key works and the ZENWSREG key
doesn't?
TIA
Dave

Thanks Jared. That's what I thought. This particular school has other
issues, including Clean Slate which blocks writing to both the HD and
Registry.
I'll post back if I find anything interesting.
Dave
"Jared Jennings" <[email protected]> wrote in message
news:Yk8Ag.3354$[email protected]..
> Dave,
>
>>I am pushing this key HKLM/SOFTWARE/Novell/ZENworks/ZENWSREG with the
>>string value ImportServer = x.x.x.x
>
> This one should be right. Have you seen the following TID?
> http://support.novell.com/docs/Tids/.../10068910.html
>
> Using the TID, you might enable logging and see why the import service
> doesn't like the key.
>
> --
> Jared Jennings
> Data Technique, Inc.
> Novell Support Forums Sysop
> http://wiki.novell.com

Registry Location and Settings

Acrobat Pro v 7.14 on Windows 7. When I try to set global preferences such as Edit\Preferences\Page Display\ Default Page layout = single page, once I exit acrobat the setting reverts back to the old default setting of Automatic. In fact, none of the settings appear to retain their options once I close out acrobat. I am the Admin and so access rights should not be an issue. Does anyone know where in the registry these settings are maintained? What value\DWORD those KEYS should be in order to select "single page", zoom factor, etc. I can find almost no information on the registry settings for Acrobat. Thanks.

Thanks for the advise. I looked at the Registry Keys and under Win 7x64 there are TWO locations:
HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\7.0\AVGeneral and HKEY_USERS\S-1-5-21-1681751190-811817649-2572322518-1000\Software\Adobe\Adobe Acrobat\7.0\AVGeneral. I will take a look at them and see if I can figure out what's controlling the specific settings I need. Perhaps using Process Monitor and spending some time tracing the actions will get me where I need to be. Again, thanks for the point in the right direction.
By the way, I have been told by tech support and others that v7 Pro is not officially supported on Windows 7x64 (which is the OS I am running). I made a decision to wait until Adobe came out with a solid 64 bit version before paying for the upgrade and that's not about to happen any time soon so I lowered my expectations and am now waiting for a solid Windows 7 x32 bit version. I'm not sure they have reached that goal as of yet. On a positive note, the Adobe iFilter9 for Windows 7x64 works like a champ, so no complaints there.
The Acrobat 7 Pro (with the updates to v7.14) is satisfactory for my needs and runs crippled under Windows 7, but it does run and I am able to open, view, edit, create, scan into, combine etc. files without much problem. Of course, the PDF Printer port is GONE and intergration into Windows Explorer is missing, but I can live with that for now. For printing I've installed Bullzip PDF printer (http://www.bullzip.com/products/pdf/info.php) a free utility for printing PDF docs and that allows me the latitude to create the PDF files that I then use in Acrobat. Not smooth, but it works for now. (Adobe even has a KB article addressing the PDF Printer Port issue runing Acrobat Pro v7 on Windows 7: but none of the suggestions worked for me...)

SCCM 2012 Installation Directory Registry Key chaning automatically to Old Installation Path

Hi Guys,
I have recently recovered SCCM 2012 SP1 CAS Site from Primary Site by reinstalling CAS site and database was replicating with Primary sites properly after CAS recovery. But we noticed that after approx. 2 hours of CAS site recovery database replication stopped.
After long digging into SCCM log files we found that SCCM installation directory was pointing to old CAS Site Installation Directory (Which was before recovery) instead of NEW Installation Directory so we changed SCCM CAS Site Installation Directory manually
to new installation path in below registry key and everything was running fine again on CAS Site.
HKEY_LOCAL_MACHINE\Software\Microsoft\SMS\Identification
But again when we restarted SMS_EXEUTIVE Service, SCCM Installation Directory again changed to old installation patch under above registry location and all is bad again. We are unable to figure out what is causing this and even we formatted our HDD before
installation CAS Site.
Can anyone please help to get rid of this issue. Our while CAS site is down due to this issue.
Thanks.

I think that you have to use the same installation directory in a site recovery scenario.
Torsten Meringer | http://www.mssccmfaq.de

Make the data for a registry key point to the installation folder of my app.

I have an application that creates files with a unique file extension (.myextension). These files should be associated with a particular icon so that the icon is shown when they are viewed in Windows Explorer, etc. I know how to do this when I create an installer by adding several registry keys and values under the [HKEY_CLASSES_ROOT] key as shown below.
                   key                                                name              type                                   data
[HKEY_CLASSES_ROOT]
     .myextension                                         (Default)          REG_SZ               Myextension.file.type.record
     Myextension.file.type.record              (Default)          REG_SZ               Text description of file type
               DefaultIcon                                  (Default)          REG_SZ               path to the icon file.
The key for the file extension record (.myextension) has a default value where the data points to the key for the file type record (Myextension.file.type.record). The data for the default value of the Myextension.file.type.record key is just a description for the file type. There is also a subkey called DefaultIcon. The data for it's default value is the path to the file containing the icon that is to associated with the file type. If the file contains more than one icon, it may be necessary to modify the data (path) to indicate which icon to use.
So, this is all good if path to the file containing the icon is known. I added an icon file to the build when I built my application and it will be installed in a known location within the directory where my application is installed. The location is [InstallDirectory]data\myicon.ico, where [InstallDirectory] is the directory where my application is installed. The installation process, including the addition of registry keys is handled by an installer that I have created. The problem arises when the user choses to install to a location other than the default directory specified in the installer. I can't know before hand where that will be. How can I specify the path in the DefaultIcon key so that it points to the correct location after installation? Is there some symbol that I can use for the installation directory so that the path will be set correctly at installation time?

Hi cbfsystems,
If correctly understand what you are trying to do, check this out. This shows you how to add a user-specified install directory to a registry entry in the installer build spec.
Cheers,
Brian A.
National Instruments
Applications Engineer

Test-Path Registry Key

Hi,
I need to test a value for a particular registry key. If this value equals 12.5.1000.767, I need the script to exit. If this key is missing, I need the script to perform a certain action. Can you provide some info, on how to script this.
It seems we can use the test-patch cmdlet.
PS C:\> Test-Path "HKLM:\SOFTWARE\Wow6432Node\ComputerAssociates\Unicenter ITRM"
True
Thanks

Hi David,
Unicenter ITRM is the registry key and the value is 12.5.1000.767
Thanks

Client Authentication/Authorization via ISE & AD, Posture Registry Key, and mapped to specific DHCP scope by AD membership

Similar Messages

Maybe you are looking for