FEATURE_DISABLE_INTERNAL_SECURITY_MANAGER Registry Key setting

Hey everyone
I needed to add this registry key to IE11 in order to work around an issue that broke modal dialogs in JavaScript. I found the workaround in this post:
H TEE TEE P ESS COLON BACKSLASH BACKSLACH social DOT technet DOT microsoft DOT com/Forums/en-US/db748198-05f2-48b2-a2f4-33b3f7ed71b7/help-kb3008923-breaks-windowdialogarguments-in-secondary-windows?forum=ieitprocurrentver
(Sorry, the forum won't let me post a link.)
This article blames KB3008923 for the issue, however I checked on my end users' machines and they did not have this update installed. Despite not having this update installed, the workaround resolves their problem.
Unfortunately, there is no information out there about the ramifications of adding this registry key. I am concerned it may open IE11 to some security vulnerabilities. Can someone please explain what this setting does or point me to
a resource that explains this?
Thanks,
Dave

Hi,
f12>Console tab, refresh the page to show suppressed error messages.... navigate to display your modal dialogs...
Post back with the error messages displayed/listed in the Console of the Developer tool.
or
If possible please provide a link to your website or a mashup that reproduces the issue.
Regards.
Rob^_^
you will find the hotfix for 3008923 here -
https://support.microsoft.com/kb/3025390
from your description however it sounds like your issue is unrelated to that regression.

Similar Messages

Registry Key / Setting to decrease the work folders client polling interval from 10 minutes

Hi,
We would like to be able to decrease the interval that the Work Folders client checks for SMB updates on the our Work Folders server. We have reduced the time limit on the server successfully via powershell, but the client can still take around 10 minutes
before it check with the server for updates. We have found a reg key:
Reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WorkFolders /v PollingInterval /t REG_DWORD /d 5
From:
http://www.networksteve.com/?p=7929
But this key does not appear to have any effect. Does it still work? Is there a alternative? We are using Windows 8.1 clients.
Kind Regards,
Matt

Hi,
After apply the registry setting, have you tried to restart the client to make sure that it can take effect? After reboot, check the sync status to see whether it take effects.
or monitor the detailed work folder as mentione in the link below to get more information
http://blogs.technet.com/b/filecab/archive/2013/10/15/monitoring-windows-server-2012-r2-work-folders-deployments.aspx
Yolanda Zhu
TechNet Community Support

Failed to set security on SQL Server registry key. Error: 2

Hi,
I have a Primary site (mixed mode) running SCCM 2007 SP1 for many months now with no issues.
This site is made up of two Win 2008 sp2 servers sharing the SCCM roles:-
SCCM01 - Site server, DP, RP, PXE and SQL2005 hosting the SCCM database
SCCM02 – SUP, MP, FSP, SLP
The SQL2005 on SCCM01 is running under a domain service account called
domain\service_sccm which is also a sysadmin in SQL as is the SCCM02 server.
In an effort to resolve the isse I have made this account a Domain Admin.
I have also used this account to log onto SEC01 to run the Secondary Site installation and to be the SQL Service account.
I'm now trying to add a Secondary Site on a Domain Controller called SEC01 (also Win2008 sp2) and on the same LAN as the SCCM01/02.
This is where I get problems.
I run the installation locally on the Sec Site server (DC) as a Domain Admin and the installation completes OK (all green ticks),
the ComponentSetup.log and Pre-Reqs are all good as well however when I check the ConfigMgrSetup.log I see the below -
Failed to set security on SQL Server registry key. Error: 2.
<11-09-2010 22:46:59> SMS Setup full version is 4.00.6221.1000
<11-09-2010 22:46:59> Successfully set security on Setup registry key.
<11-09-2010 22:46:59> Failed to set security on SQL Server registry key. Error: 2
<11-09-2010 22:46:59> Successfully set security on Identification registry key.
<11-09-2010 22:46:59> Creating SMS Inbox Source registry key ...
<11-09-2010 22:46:59> Installing SMS Site Component Manager ...
<11-09-2010 22:46:59> Installing Site Component Manager under acct <NT AUTHORITY\SYSTEM> path <C:\Program Files (x86)\Microsoft
Configuration Manager\bin\i386\sitecomp.exe>
<11-09-2010 22:47:01> Started Site Component Manager service
<11-09-2010 22:47:01> SMS Site Component Manager installation completed.
<11-09-2010 22:47:01> Done with service installation
Adding the PMP role to SEC01 also fails to install and no MPSetup or MPControl logs are created.
WebDav and win2008 roles, features all added and server fully patched.
Despooler.log on SCCM01 seems good and passing keys.
Tried installing to default path and to shortened path such as C:\SCCM
The new secondary site is listed in the console and an address can be added for the Secondary Site
BITS Server Extensions and Remote Differential Compression Features are enabled.
The Group memberships all appear ok:-
SCCM01
Local Admins
contains the sec site server SEC01, SCCM01, installation accounts
SMS_SiteToSiteConnection_001
SEC01 (the sec site server)
SMS_SiteSystemToSiteServerConnection_001
SCCM02
SEC01
No Local Admins as a DC
SMS_SiteToSiteConnection_002
SCCM01
SMS_SiteSystemToSiteServerConnection_002
empty
SQL 2005
This has the account logged in during installation as a sysadmin
SCCM02 is also sysadmin
The fundamental issue appears to be that the SEC01$ server account is not being added to SQL Logins (and therefore SCCM database Roles)
therefore the installation cannot complete.
I have tried to manually add the SEC01 account to SQL Logins before installation of Sec Site but this did not work.
Not sure if the fact that SEC01 is a DC may be a factor.
Appreciate any help if anyone has seen this before or can suggest a resolution.
Thanks

After a lot of digging around and head scratching I eventually found the resolution.
The original thread title Error turned out to be a bit of a red herring in that my failure to deploy Sec Sites came down to two separate issues seemingly unrelated to the error message of the thread title.
The first part of the resolution was to manually create the SQL Server accounts for the Sec Site Servers and assign them to the smsdbrole_MP DB role to
let the SQL side of the SCCM install complete a s these were not being created automatically.
This then left the fact that that the installation of the Sec Site completed successfully according to the install logs in C:\ however the DP and MP would
never install.
The big clue was eventually contained in the mpfdm.log errors relating to
**ERROR: Cannot find path for destination inbox SMS_AMT_PROXY_COMPONENT on server REGISTRY SMS_MP_FILE_DISPATCH_MANAGER
and
**ERROR: Cannot find path for destination inbox Asset Intelligence KB Manager on server REGISTRY SMS_MP_FILE_DISPATCH_MANAGER
Thankfully the errors led me to these two blogs:
http://myitforum.com/cs2/blogs/scassells/archive/2009/07/20/error-cannot-find-path-for-destination-inbox-sms-amt-proxy-component-on-server-registry.aspx
and
http://social.technet.microsoft.com/Forums/en-US/configmgrsetup/thread/5fcc53d4-8629-4b34-9eaa-6cb020eedc13/
As it turned out the SCCM installation registry and folder creation does not complete and I had to manually enter the reg settings as detailed in the
links above to complete the installation. Once I did as described everything worked a treat – all my MPs and DPs are 100% now.
Solutions
Add the following reg keys to each of your effected secondary sites.
Inbox Fix
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\MPFDM\Inboxes]
"Asset Intelligence KB Manager"="E:\\Program Files\\Microsoft Configuration Manager\\inboxes\\AIKbMgr.box"
"SMS_AMT_PROXY_COMPONENT"="E:\\Program Files\\Microsoft Configuration Manager\\inboxes\\amtproxy.box"
Asset Intelligence fix:
Note: you will need to identify the next largest key value.
In my example it was key 49
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Inbox Source\Inbox Definitions\49]
"Inbox Name"="Asset Intelligence KB Manager"
"Relative Path"="inboxes\\AIKbMgr.box"
"NAL Path"=""
"User Rights"=dword:00000000
"Service Rights"=dword:00000004
"Monitoring Enabled"=dword:00000001
"Location Type"=dword:00000001
"Guest Rights"=dword:00000001
AMT registry Fix.
  Note: you will need to identify the next largest key value.
In my example it was key 50
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Inbox Source\Inbox Definitions\50]
"Inbox Name"="SMS_AMT_PROXY_COMPONENT"
"Relative Path"="inboxes\\amtproxy.box"
"NAL Path"=""
"User Rights"=dword:00000000
"Service Rights"=dword:00000004
"Monitoring Enabled"=dword:00000001
"Location Type"=dword:00000001
"Guest Rights"=dword:00000001
Big thanks to Shaun Cassells and John Marcum for these blogs

Registry key for the setting "Let printer determine colors"

Hi,
We have a Citrix environment with several Terminal servers. When people print PDF through Adobe Reader. We get the error message "Let printer determine colors".
Then we have to select "Let printer determine colors" to allow Xerox printer to do the color handling.
Is there a registry key or something I can do to alway let the Let printer determine colors?
So that the users won`t be bugged with this message everytime?
Regards Tom Ruben

There are some docs that document all Reader settings, but these are rather difficult to navigate. I do not even want to go and look for them now.
If I have an issue like yours (need to know the registry equivalent for a certain Reader setting) I use Regshot: take a registry shot before and after the update, then compare what's changed.

Outlook 'Bitness' registry key not set. by 64-bit install of Office 2013

A 32-bit version of Office 2013 was installed by default on Windows 8.
I uninstalled this and installed the 64-bit version as per http://office.microsoft.com/en-us/choose-the-32-bit-or-64-bit-version-of-office-HA102840825.aspx.
But the Outlook "Bitness" registry key is missing, i.e. no \HKEY_LOCAL_MACHINE\Software\Microsoft\Office\15.0\Outlook\Bitness.
(Note: the old 32-bit install had key \HKEY_LOCAL_MACHINE\Software\Microsoft\Office\14.0\Outlook\Bitness)
Thank you for any insights as to why the key isn't set.

Hi,
Thank you for posting in the MSDN Forum.
Since the issue is more relate to the end-user, I'd like to move it to Outlook IT pro forum.
The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us.
Thanks for your understanding.
Best regards
Fei
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Adobe PDF Registry Key for setting Available PostScript Memory

Good evening,
Is there a Registry Key that can be modified to set the "Available Postscript Memory" in the Device Settings tab of the Adobe PDF Converter ?
Thank you,
Jeff

I don't think so - but I'm curious why you would want to ever change
this setting. (It may not do what you think it does).
Aandi Inston

How to get registry key lastwritetime using batch/powershell

Hello,
I want to get a registry key's LastWriteTime using batch/powershell. These are what i have tried..
1. Launch regedit and manually export the key using the UI, this gives me the lastwritetime, but I need a commandline version of this. regedit /e only exports the key and value data.
2. dir HKLM:\software\mykey
nothing returned
3. Get-ChildItem HKLM:\software\mykey | Select-Object *
nothing returned
4. Get-ItemProperty HKLM:\software\mykey | Select-Object *
LastWriteTime not returned; other values are returned
5. (Get-Item HKLM:\software\mykey).LastWriteTime
Nothing is returned
Is the only way to do this by using pinvoke with RegQueryInfoKey?
Thanks in advance
ss883r

The
.zip on the repository will still work for version 2. Basically, you'll get a definition for a function called 'Add-RegKeyMember'. You can dot source the provided script, or you can copy the function definition into your own script. You would use it like
this:
# Using Get-Item:
PS> Get-Item HKLM:\SOFTWARE | Add-RegKeyMember | select Name, LastWriteTime, ClassName
# Using Get-ChildItem:
PS> Get-ChildItem HKLM:\SOFTWARE | Add-RegKeyMember | select Name, LastWriteTime, ClassName
# Passing a path:
PS> Add-RegKeyMember HKLM:\SOFTWARE | select Name, LastWriteTime, ClassName
There's also a proxy function for Get-ChildItem that will automatically add the property anytime you use Get-ChildItem (dir, ls, gci) on a registry path. The PSv3 only method I was talking about simply updates the type data to automatically call the function
on any RegistryKey object. You can actually set version 2 up to do that, but it requires an XML file.

How do I identify the latest file modifications, application install, and registry key modification for Security Forensics.... using GP Audit for registry/file system

Hello,
Title pretty much states it all. I initially set out (as part of a Security Forensics initiative) to identify the most recently installed applications, modified files, and registry key changes using PowerShell. I attempted to pull this information and sort
them by date installed/last modified, but it was brought to my attention this information isn't always present and can be modified - so it's not accurate.
At that time it was suggested we use Group Policy auditing for Registry and File System - but I'm not sure how I'm going to use/pull these in PowerShell? This will be used on remote host all over the world so local physical access isn't an option.
My question is:
Once Group Policy Auditing for Registry and File System has been enabled, how would I go about pulling those audit logs for review once a system has been identified as compromised? I'm brand new to this GP Auditing (we have a separate team for that) so feel
free to take it from the beginning. :)
Thanks in advance!

Hi,
Here are a few suggestions for you:
Ensure Remote Registry service is started on local and remote machines.
Add the – Credential option and supply administrative credentials within the command.
More information for you:
Get-Eventlog doesn't work against Vista/W7 clients
https://social.technet.microsoft.com/Forums/en-US/c5185a01-b0d2-49a7-9aa7-52e6534ada04/geteventlog-doesnt-work-against-vistaw7-clients?forum=winserverpowershell
PowerShell - How to Get XML EventData - Remote Eventlogs - Exchange Events
https://social.technet.microsoft.com/Forums/scriptcenter/en-US/382b10c9-d740-46b1-b81c-b24de911eb14/powershell-how-to-get-xml-eventdata-remote-eventlogs-exchange-events-?forum=ITCG
Powershell script to gather failed logon attempts by event id and type from the security events log
https://social.technet.microsoft.com/Forums/scriptcenter/es-ES/00a62492-c63a-4c8b-92f9-1cc857223a00/powershell-script-to-gather-failed-logon-attempts-by-event-id-and-type-from-the-security-events-log?forum=ITCG
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Acrobat registry keys to create file name and path

Hi,
I need to find a way to get my Acrobat to create a pdf with the same name as the drawing file it's created from and in the same folder as the drawing file. The folder path will vary from drawing to drawing.
I need this to happen automatically, without prompting for the file name or the destination.
I see there is a way to set a pre-defined path using registry keys but is there a way to use registry keys to set the filename and path of the drawing, please?
I would rather not use scripting as I don't really know how to do it.
Thanks,
Barnaby

I think it will use the path and name of the original file if you do not prompt for a file name. I always ask, so I am not sure.

How to include install date and time in registry keys

Hi All,
Hopefully someone can help me. I am creating an installer which includes some properties in the build specs. I also wannt to include some registry keys to be added upon installation:
1. I include the install directory of the application by providing the key with the value [INSTALLDIR]. This seems to work well and I have no problem with this.
2. The other key I would like to include (but I do not know how) is the date and time of installation. Is there a way of automatically including this in a registry key (similar to INSTALLDIR)?
I look forward to your expert advice!
Kind Regards,
Larry
Laurence C.
Senior Test Development Engineer
Dyson Ltd
Solved!
Go to Solution.

Larry,
afaik the setting for "Run as Admin" is per OS process. As the "Run Exe after installation" is a different process as the application you installed by it (e.g. "MyApplication.exe"), i wouldn't expect the MyApplication.exe to require/use admin-rights.
Norbert
CEO: What exactly is stopping us from doing this?
Expert: Geometry
Marketing Manager: Just ignore it.

Unable to change registry key permissions using group policy

In order to fix a problem with a piece of software not saving it's settings I need to change the permission on a registry key of our client machines.
I've setup a GPO and in Computer Configuration -> Windows Settings -> Security Settings -> Registry specified the registry key I want to change the permission on, added our staff security group and given the full control over that key.
The permission are not being changed and when I run rsop I'm getting the following error:
The policy engine did not attempt to configure the setting. For more information see %windir%\security\logs\winlogon.log on the target machine.
I've looked in the winlogon.log file and can see nothing meaningful that relates to this GPO. I set the logging to be verbose and this doesn't include any additional information. There appears to be nothing meaningful in the event logs on the
local machine.
The OS is Windows 7 SP1
Anybody shed any light why the policy wouldn't be applying the permissions to the registry key?

Hi,
Is this client running Windows 7 64bit? If so, this problem is expected since the Wow6432Node key is only recognizable in 64bit applications.
Security Client Side extension is a 32 bit application and therefore cannot see the key to change permissions. In this situation, you need to change permission in HKLM/Software/[appname]. For more information, please refer to
http://support.microsoft.com/kb/896459
If it is Windows 7 32bit, this is a GPO not apply issue. Please check if the following registry keys exist on the Windows 7 client:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\SMART Technologies
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\SMART Technologies Inc.
If so, please help collect the following information:
1.
Did this problem only occur on one Windows 7 client or occur on all Windows 7clients?
2.
What’s the Operating System on the DC?
3.
Enable debug logging for the Net Logon service. Reproduce the problem and check if there is any relevant error.
Enabling debug logging for the Net Logon service
http://support.microsoft.com/kb/109626
Regards,
Bruce

Unable to write to registry key for Acrobat XI - error 1406

Hi all,
I have a problem regarding the installation of Adobe Acrobat XI 11.0.07 on an ASUS laptop with Windows 7 Home Premium OS.
In short, I am unable to complete the installation of Adobe Acrobat XI on this machine because Acrobat is not able to write the value to the registry key situated here:
HKEY_LOCAL_MACHINE --> SOFTWARE --> Microsoft --> Internet Explorer --> Toolbar.
I tried to find solutions on the internet, and have found one webpage at the Adobe Forums, which is this one: Error 1406.Could not write value Adobe ARM - and it was not very helpful, since the person asking solved his problem, but did not tell how he did. So, I found this page at Acrobat Help, called Error 1402 | Error 1406 | Acrobat, Reader where I tried the different solutions, but so far none of these have worked. What I did was to remove all previous versions of Adobe Acrobat, Reader, Air and so on. In fact, I deleted all software from Adobe in case one of these softwares were to blame, but it has not worked. But before I deleted all this software, I deleted Acrobat and Reader several times, but as you probably already have found out, it did not work. As this did not work, I tried the next solution at Acrobat Help, which was to "Set permissions to their defaults in the registry". I followed the solution completely and did everything it said, but it has not worked. As a note, I have to say that the registry key type I have problems with is called "Locked", the type is REG_DWORD and the data value is (0). Does this have anything to do with it? I am not too familiar with editing the registry. Though, I did try to change the value to (1) and updating the registry, but it did not work...
More information: nevertheless if I install the complete version of Adobe Acrobat XI or the typical installation, the same error comes up: error 1406. And I did scan my system with my antivirus software, called Bullguard, to see if there were any viruses; there were none. I also closed my antivirus software and diabled the firewall of Bullguard, but that was not succesful either, and I did a scan of my system using cmd as an administrator (sfc /scannow), and the program found some errors it could not fix. As far as I can see, it found three .dll files with errors. I have the document called sfcdetails.txt if that would be any helpful to you.
Besides that, I am not sure what to do. I did pay for Adobe Acrobat the 23rd of January, 2015, and I have not managed to make it work properly yet, and I cannot update the software, since I have this problem with the registry. I am able to use the software for what I had to use it for until now, but I would like to be able to use it for everything it stands for and update it to prevent any lapse in security.
Thank you. I hope you have any ideas for my problem and will be able to help me!
Best regards,
Mads

Hi Rahul,
Thank you for your answer. Though, it did not solve my problem! I did what you said: I tried using the Adobe Acrobat cleaner tool, and afterwards, I restarted my computer. After this, I downloaded the program from your link and I tried to install the program, but I did not succeed, because the same error came up, which is this:
Error 1406. Could not write value {47833539-D0C5-4125-9FA8-0819E2EAAC93} to key \SOFTWARE\Microsoft\Internet Explorer\Toolbar.
With this error, the only options are to abort, retry or ignore the install, but none of these solves the issue, I am afraid.
But what I think it is all about is how to gain access to the registry. I followed the tutorial, I mentioned above, but I were not able to solve it... I gained administrator access to the registry, I made the current administrator account the owner of the key (the current administrator is not the original administrator of the computer, since I changed this long time ago), and I made the permissions correctly, I guess. I followed the tutorial, anyhow. Though, what confuses me, is that when pressing the button, called "Advanced", and entering the menu called "Advanced security settings for Toolbar" (I have the Danish version of Windows, excuse me if I did not translate it correctly), I see many persmission posts, two of which have the name of the current administrator account. One of these have full control, the persmissions from this are not inherited and they are used on "this key and underkeys". The second only has a special permission, it is inherited from "MACHINE\SOFTWARE\..." and it is used only on this key. How to change this, I am not sure. But I do not suspect that there should be two permissions for the same administrator account? Do you know if this is right?
Thank you.
Best regards,
Mads

Registry key to Hide Document Message Bar not working in Acrobat 9

In Acrobat 7, am hiding the Document Message bar on top of every PDF document by setting the registry key
i HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\9.0\FormsPrefs\bHideDocumentMessageBar.
However, same key is not hiding the message bar in Acrobat 9. Please let me know what is the key in Acrobat 9.

The answer:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Adobe Acrobat\9.0\FeatureLockDown\cDocumentStatus]
"bSuppressMessageBar"=dword:00000000
Sometimes IT-dept. customises without telling it and forgetting it immediately.

Exchange BPA Errors (Exchange server is a virtual machine but the additional tools are not installed and The 'Services' string type value located in 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ExchangeServer\v14\Setup\Services' registry key is missing)

Hi,
I am running BPA on My Exchange 2010 VM (Server 2008 R2 VM on Hyper-V) and get the following errors:
The 'Services' string type value located in 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ExchangeServer\v14\Setup\Services' registry key is missing or inaccessible. The Microsoft Exchange Information Store service won't start. As a result, all services that depend
on this service won't be able to start
Exchange server [Exchange Server FQDN] is a virtual machine but the additional tools are not installed. This configuration is not supported. Install Virtual Machine Additions for this guest.
Problem is that, for the first, that Key exists and the service is actually running fine. And for the second my VM tools are already installed.
Hopefully someone out there has had the same issue and can assist.
Pete

Hi Pete,
For the first error message, please try the following steps:
Make sure the Information Store service is in Starting status,
Automatic startup type and works well, as a test we can try to
restart the Infroamtion Store service and verify the service works well.
Start
Registry Editor, find the registry key “Services” under “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ExchangeServer\v14\Setup”, its value is “C:\Program
files\Microsoft\Exchange Server\v14”(default install location), please check your registry, make sure the key “Services” exist and value is the Exchange Server install location and the
location is accessible;
Start
Registry Editor, and locate the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Exchange\Setup
Use the
Permission option under the Security tab to check the permission setting on this key. Make sure
System is in the list with Full Control permissions if the service account is Local System. If you are not using Local System as the service account, check the existence of the corresponding account in the list and ensure that
it has Full Control permissions. Please refer to this article:
Title: Exchange Store Does Not Start: Errors 7024, 1026, 9542, and 5000
Link:
http://support.microsoft.com/kb/285116
Start
ADSI Edit, and then browse to the following location:
Domain.com/Configuration/Services/Microsoft Exchange/Org/Administrative Groups/AdminGroup/Servers/Server Name
Right-click the
server name, and then click Properties.
Click the
Security tab, make sure this own server’s server object have
full control permission on its own server.
If not or the object is missing, please modify the permission or click
Add, locate the computer account for the Exchange Server computer, add it to the Permissions list with full control.
Click OK, and then close ADSI Edit.
Use
Active Directory Users and Computers to add the current affected
Exchange Server computer account to the Exchange Servers(previous version should be “Exchange Domain Servers”) group in the
Microsoft Exchange Security Groups( or Users) OU. Refer to this article:
http://support.microsoft.com/kb/297295.
Restart the Exchange Server computer, then rerun the ExBPA.
For the second error message, Microsoft don’t recommend to install Exchange Server on virtual machine without additional tools, so the error message occurs. We can just ignore
this message, it will not affect the Exchange servers.
Regards, Eric Zou

SCCM 2012 - Hardware Inventory - Dynamic Registry Key Inventory

Hi all,
I am trying to inventory a set of registry values based upon a dynamic registry key. The application is called ACME and different versions of it exist on all clients. For example:
Some clients have:
HKLM\Software\ACME\5.0.1
While others have:
HKLM\Software\ACME\5.0.2
While others have:
HKLM\Software\ACME\5.0.3
The common denominator is that under the version key, all of the subkeys are consistent and the same.
The two values I am looking for are "LastUser" and "LastExecuted" which reside under the version key.
HKLM
------> Software
--------------------> ACME
------------------------------>5.0.1
--------------------------------------> LastUser & LastExecuted
So i basically want to do a dynamic lookup for the first child key under "ACME".
I have been using RegKeyToMOF but I am unable to get the data populated into the database. The configuration.mof file compiles successfully (as can be seen in dataldr.log).
Below are the configs I am using. Can anyone shed some light as to why its not populating anything in the DB?
#pragma namespace ("\\\\.\\root\\cimv2")
#pragma deleteclass("ACME", NOFAIL)
[dynamic, provider("RegProv"), ClassContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\ACME")]
Class ACME
[key] string KeyName;
[PropertyContext("LastUser")] String LastUser;
[PropertyContext("LastExecuted")] String LastExecuted;
#pragma namespace ("\\\\.\\root\\cimv2\\SMS")
#pragma deleteclass("ACME", NOFAIL)
[SMS_Report(TRUE),SMS_Group_Name("ACME"),SMS_Class_ID("ACME")]
Class ACME: SMS_Class_Template
[SMS_Report(TRUE),key] string KeyName;
[SMS_Report(TRUE)] String LastUser;
[SMS_Report(TRUE)] String LastExecuted;
From the client when it hits HINV cycle
Collection: Namespace = \\.\root\cimv2; Query = SELECT __CLASS, __PATH, __RELPATH, KeyName, LastExecuted, LastUser FROM ACME; Timeout = 600 secs.
TIA!

You have to specify the full path in the MOF to collect the data. I have an example of how you can embed a WMI trigger and a vbscript into a MOF file that will populate any information you want from the registry into a cimv2 class, but that may actually
be more than you really need. Why don't you just inventory each version? It is not as clean, but will be easier.
example of Acme 5.0.1:
#pragma namespace ("\\\\.\\root\\cimv2")
#pragma deleteclass("ACME501", NOFAIL)
[dynamic, provider("RegProv"), ClassContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\ACME\\5.0.1")]
Class ACME501
[key] string KeyName;
[PropertyContext("LastUser")] String LastUser;
[PropertyContext("LastExecuted")] String LastExecuted;

FEATURE_DISABLE_INTERNAL_SECURITY_MANAGER Registry Key setting

Similar Messages

Maybe you are looking for