Hi all, welcome back,
Today I’ll share with you a couple of VBScript samples I developed the other day. They use WMI and its StdRegProv class to read theWindows registry.
This sample will take a registry key and show its subkeys and the values within those subkeys:
‘ Constants (taken from WinReg.h)
‘
Const HKEY_CLASSES_ROOT = &H80000000
Const HKEY_CURRENT_USER = &H80000001
Const HKEY_LOCAL_MACHINE = &H80000002
Const HKEY_USERS = &H80000003Const REG_SZ = 1
Const REG_EXPAND_SZ = 2
Const REG_BINARY = 3
Const REG_DWORD = 4
Const REG_MULTI_SZ = 7‘ Chose computer name, registry tree and key path
‘
strComputer = “.” ‘ Use . for current machine
hDefKey = HKEY_LOCAL_MACHINE
strKeyPath = “SOFTWARE\Microsoft\Cryptography\Defaults\Provider”‘ Connect to registry provider on target machine with current user
‘
Set oReg = GetObject(“winmgmts:{impersonationLevel=impersonate}!\\” & strComputer & “\root\default:StdRegProv”)‘ Enum the subkeys of the key path we’ve chosen
‘
oReg.EnumKey hDefKey, strKeyPath, arrSubKeysFor Each strSubkey In arrSubKeys
‘ Show the subkey
‘
wscript.echo strSubkey‘ Show its value names and types
‘
strSubKeyPath = strKeyPath & “\” & strSubkey
oReg.EnumValues hDefKey, strSubKeyPath, arrValueNames, arrTypesFor i = LBound(arrValueNames) To UBound(arrValueNames)
strValueName = arrValueNames(i)
Select Case arrTypes(i)‘ Show a REG_SZ value
‘
Case REG_SZ
oReg.GetStringValue hDefKey, strSubKeyPath, strValueName, strValue
wscript.echo ” ” & strValueName & ” (REG_SZ) = ” & strValue‘ Show a REG_EXPAND_SZ value
‘
Case REG_EXPAND_SZ
oReg.GetExpandedStringValue hDefKey, strSubKeyPath, strValueName, strValue
wscript.echo ” ” & strValueName & ” (REG_EXPAND_SZ) = ” & strValue‘ Show a REG_BINARY value
‘
Case REG_BINARY
oReg.GetBinaryValue hDefKey, strSubKeyPath, strValueName, arrBytes
strBytes = “”
For Each uByte in arrBytes
strBytes = strBytes & Hex(uByte) & ” ”
Next
wscript.echo ” ” & strValueName & ” (REG_BINARY) = ” & strBytes‘ Show a REG_DWORD value
‘
Case REG_DWORD
oReg.GetDWORDValue hDefKey, strSubKeyPath, strValueName, uValue
wscript.echo ” ” & strValueName & ” (REG_DWORD) = ” & CStr(uValue)‘ Show a REG_MULTI_SZ value
‘
Case REG_MULTI_SZ
oReg.GetMultiStringValue hDefKey, strSubKeyPath, strValueName, arrValues
wscript.echo ” ” & strValueName & ” (REG_MULTI_SZ) =”
For Each strValue in arrValues
wscript.echo ” ” & strValue
NextEnd Select
NextNext
But what if we only need to know if a registry key exists? We could just do the following:
‘ Constants (taken from WinReg.h)
‘
Const HKEY_CLASSES_ROOT = &H80000000
Const HKEY_CURRENT_USER = &H80000001
Const HKEY_LOCAL_MACHINE = &H80000002
Const HKEY_USERS = &H80000003‘ Chose computer name, registry tree and key path
‘
strComputer = “.” ‘ Use . for current machine
hDefKey = HKEY_LOCAL_MACHINE
strKeyPath = “SOFTWARE\Microsoft\Cryptography\Defaults\Provider”‘ Connect to registry provider on target machine with current user
‘
Set oReg = GetObject(“winmgmts:{impersonationLevel=impersonate}!\\” & strComputer & “\root\default:StdRegProv”)‘ Try to enum the subkeys of the key path we’ve chosen. We can’t if the key doesn’t exist
‘
If oReg.EnumKey(hDefKey, strKeyPath, arrSubKeys) = 0 Then
wscript.echo “Key exists!”
Else
wscript.echo “Key does not exists!”
End If
I hope this helps.
Cheers,
Alex (Alejandro Campos Magencio)