Registry commands syntax

  • 12 November 2015
  • 5 replies
  • 52 views

Userlevel 2
Badge
What is the correct syntax for registry commands via the console (Agent Commands / Advanced / Run a registry command)?

Online help does not give any example, only says this short advice:

 

"This command uses the same syntax as reg.exe, but does not call reg.exe"

 

So I tried issueing the following command:

 

ADD HKLMSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer /v NoDriveTypeAutoRun /t dword /d 000000ff

 

but the I dit not succeed, even if the "View commands for selected endpoint" log says that it was executed.

(And BTW, why does not this log shows back any result?)

 

So what is the correct syntax?

5 replies

Userlevel 7
Badge +56
So it looks like your sytanx is correct, so it could be a bug in this feature.  If you wouldn't mind, please create a ticket here:

https://www.webrootanywhere.com/servicewelcome.asp?SOURCE=ENTERPRISEWSA

 

so that we can get it documented and escalated to the right folks.  I'm also tracking down some documentation on syntax for that feature to send you, just so you have it.
Please post the answer here.  Many of us need to stop win10 too. 😉
Also interested in more details being shared. Please post. Thanks.
Same issue here, the registry command get executed but the registry key is not delete in my case 

check here: 

http://prntscr.com/km5bnz
Userlevel 7
Badge +35
I would recommend that you open a ticket with our support team, as this may be specific to your instance.

Reply