I started throwing this in my lab to test... but the very first thing I noticed was you mentioned you are looking in HKCU.  I don't have that in Current User.  that's in hkey_Classes_root for me.  Was that a typo on your part, or is your CI setting looking in HKey_Current_user?

Sherry Kissinger
Microsoft MVP - ConfigMgr
mofmaster@myitforum.com

--- On Tue, 7/7/09, Rimmerman, Russ <Russ.Rimmerman@c-a-m.com> wrote:

From: Rimmerman, Russ <Russ.Rimmerman@c-a-m.com>
Subject: [mssms] Configuring DCM to detect (Default) Value name
To: mssms@lists.myitforum.com
Date: Tuesday, July 7, 2009, 9:39 PM

I'm having issues trying to monitor HKCU\TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0\win32 for a value not equaling C:\WINDOWS\system32\ieframe.dll

 

The String Value name is (Default).  For the value name I've tried (Default), leaving it blank, and @ and every time it comes back non-compliant even though my PC has the correct registry value for the key.

 

I have both the Settings validation non-compliance event for instance count and the Objects non-compliance event for instance count unchecked.

 

The rule in the xml looks like this:

  <sch:assert test="(@xsi:nil = 'true' or ((mssmlfn:stringCompare(.,'C:\WINDOWS\system32\ieframe.dll',true()) != 0)))" mssml:category="dcm:None" mssml:severity="warning" dci:DigestElement="Rule_9838def0-e627-409c-ac38-d5cc257f7bd3" dci:ModelTestElement=".">*** *** *** id=Rule_9838def0-e627-409c-ac38-d5cc257f7bd3 dci:DigestElement=Rule_9838def0-e627-409c-ac38-d5cc257f7bd3 *** *** ***</sch:assert>

  </sch:rule>

 

Any ideas??

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information of Cameron and its Operating Divisions. Any unauthorized use or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply email and delete and destroy all copies of the original message inclusive of any attachments.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/

==============
Missed an email? Check out the list archive:
http://myitforum.com/cs2/blogs/smslist/

Published with BlogMailr



Trackbacks

No Trackbacks

Comments

No Comments