System Center Configuration Manager TechCenter >
System Center Configuration Manager Forums
>
Configuration Manager Desired Configuration Management
>
HKCU Registry Value?
HKCU Registry Value?
- Is it not possible to configure a CI based on HKEY_CURRENT_USER?
I saw this post and that's what I assume this means?
http://social.technet.microsoft.com/forums/en-US/configmgrdcm/thread/a0410ceb-6ca5-47f4-97b8-9d3da78ea749/
I just want a simple CI that shows if the screen saver is enabled. I have created one based on the HKCU\Control Panel\Desktop key and string value SCRNSAVE.EXE. My screen saver is enabled, but it comes back non-compliant, showing that 3 other users are not compliant (mine is not listed).
BTW -- when I created a standard CI based on HKLM, it returns correctly.
Any ideas? Thanks.
xtiyu32n
Answers
- Yours is not listed because it is Compliant for your user. If it were disabled for you, yours would also be listed. Since it checks all users, to make it compliant the screen saver would have to be enabled for each user.
It returns correctly for HKLM because there is only one HKLM hive for the machine, however HKCU changes based on who is currently logged in (and in some cases more than one user is logged in).
So, as it states in the post you referenced, to do what you want in this scenario you'll probably have to create a script setting and determin the setting using a script.
Kevin
This posting is provided "AS IS", provides no warranties, and confers no rights. -- Kevin- Proposed As Answer byKevinM [MSFT]MSFT, ModeratorMonday, September 14, 2009 4:48 PM
- Marked As Answer byKevinM [MSFT]MSFT, ModeratorWednesday, September 23, 2009 11:13 PM
All Replies
- Yours is not listed because it is Compliant for your user. If it were disabled for you, yours would also be listed. Since it checks all users, to make it compliant the screen saver would have to be enabled for each user.
It returns correctly for HKLM because there is only one HKLM hive for the machine, however HKCU changes based on who is currently logged in (and in some cases more than one user is logged in).
So, as it states in the post you referenced, to do what you want in this scenario you'll probably have to create a script setting and determin the setting using a script.
Kevin
This posting is provided "AS IS", provides no warranties, and confers no rights. -- Kevin- Proposed As Answer byKevinM [MSFT]MSFT, ModeratorMonday, September 14, 2009 4:48 PM
- Marked As Answer byKevinM [MSFT]MSFT, ModeratorWednesday, September 23, 2009 11:13 PM
- But aren't most profile-based (user) settings in the HKCU? Things like IE settings, etc. Would you have to create custom scripts to report on all of these?
xtiyu32n I don't know of any other way with Configuration Manager 2007. Either that or ensure that all users have the registry setting set correctly and report compliance for all users.
This posting is provided "AS IS", provides no warranties, and confers no rights. -- Kevin- KevinM, that sounds fine in theory, but user profiles created for accounts used in UAC situations often don't have these settings.
