How to fetch particular Windows Registry Data and generate Report using Endpoint Central?

This document explains the steps to fetch particular Registry data and generate a report using Computer/User based Custom Script Configuration in Endpoint Central.

Table Of Content

1. Prerequisites
   • Adding the Script using Template
2. Deploying the Script using Custom Script Configuration
3. Generating the Report

Prerequisites

Adding the Script using Template

1. In the Endpoint Central console, go to Configurations > Settings > Script Repository > Templates
2. Using the search tool navigate to the ReadRegistry Script and click Add to Repository under the Actions column.
3. The script will now be successfully added to the Script Repository for deployment. You can view the script in the Repository tab.
4. You must edit the script Registry Value argument based on your requirement due to the hardcode nature of the script.
5. To edit the script, navigate to the script and click on View Script to edit the Registry Value in the code based on your requirement. Example: You can use this script to extract important system information from the registry like, to check time zone settings and adjustments, to ensure Remote Desktop settings, to review the applied security GPO policy values, to retrieve the user's recent document path in the endpoints.

5. Click Save to save the script.

How to deploy the Script using Computer/User Based Custom Script Configuration

1. In the Endpoint Central console, navigate to Configurations > Add Configurations > Windows Configuration > Custom Script > Computer /User Configuration

   Note: It is recommended to use the User Configuration when you want to fetch Registry data from the HKEY_CURRENT_USER(HKCU) hive.

2. Specify the Name and Description for the configuration
3. Click on Repository and choose the Read Registry script in the Script Name tab.
4. Due to the hard-coded nature of the script, you can skip Switch Argument.
5. Exit codes confirm if the script has been executed successfully. By default, it is 0. If you have any exit codes, you can specify them here. If there are multiple exit codes, separate them with commas [,].
6. Configure the Frequency as Once.
7. Select the Enable logging for troubleshooting to receive the executed script's output which will be logged, and displayed in the Remarks section under the Execution Status of your configuration after its execution is completed
8. Configure the Run As based on the type of the configuration based on your requirement from the below options:
   1. System User: The script will be applied at the System level, utilizing the System user account. (Applicable to Computer based configuration.)
   2. Run As User: The script will be deployed to the target machine with the credentials you select. We recommend choosing the Domain Admin credentials to avoid access level issues.
   3. Target User: The script will be applied to the target users configured under Define Target. (Applicable to User based configuration)
9. Define the targets for the deployment.
10. Specify retry options, if required
11. You can also enable notifications to receive emails based on the specified frequency.
12. Click on the Deploy or Deploy Immediately button to deploy the configuration in the target machines.
13. To save the configuration as a draft or template for later use, click Save as

Generating Report

1. Once the Configuration is successfully executed navigate to Configuration > Execution Status.
2. Click on the Column Chooser option in to customize the data you want in to be included in the report- preferably the Computer Name, Domain Name, Executed At and Remarks column with the script output. Click Save

3. After completing the customization of data input, click on Export. You can export the report in PDF,CSV or XLSX format.

You have successfully generated a report fetching particular Registry data from your endpoints using Endpoint Central.