Topic
  • 2 replies
  • Latest Post - ‏2012-12-03T21:55:03Z by SystemAdmin
SystemAdmin
SystemAdmin
119 Posts

Pinned topic regedit execution on windows server 2008 r2

‏2012-11-15T09:46:47Z |
Hello,
I am trying to apply weak chipers fix for set of servers by creating a bigfix task, however it is failing to execute regedit action:
Completed delete temp.reg
Completed delete __createfile
Completed Createfile until end-reg-edit-commands
Completed Windows Registry Editor Version 5.00
Completed http://HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server
Completed "Enabled"=dword:00000000
Completed
Completed http://HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\PCT 1.0\Server
Completed "Enabled"=dword:00000000
Completed
Completed HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\DES 56/56
Completed "Enabled"=dword:00000000
Completed
Completed HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\NULL
Completed "Enabled"=dword:00000000
Completed
Completed HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 128/128
Completed "Enabled"=dword:00000000
Completed
Completed HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 40/128
Completed "Enabled"=dword:00000000
Completed
Completed HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC2 56/128
Completed "Enabled"=dword:00000000
Completed
Completed HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128
Completed "Enabled"=dword:ffffffff
Completed
Completed HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128
Completed "Enabled"=dword:00000000
Completed
Completed HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128
Completed "Enabled"=dword:00000000
Completed
Completed HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 64/128
Completed "Enabled"=dword:00000000
Completed
Completed HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168/168
Completed "Enabled"=dword:ffffffff
Completed end-reg-edit-commands
Completed move __createfile temp.reg
Failed wait regedit -s temp.reg

If I run created file manually it work.
Can you please help me to understand why command wait "regedit -s temp.reg" is failing and how to fix it?
  • Eric Walker
    Eric Walker
    34 Posts

    Re: regedit execution on windows server 2008 r2

    ‏2012-11-15T16:45:23Z  
    Hi Vasily,

    I think you want the Fixlet Authoring forum -- in this forum we focus on specific details of SCA and the SCM content.

    http://www.ibm.com/developerworks/forums/forum.jspa?forumID=2701

    But to better answer your question, it will help us to have the original action that you're trying to run.

    All the best,
    Eric
  • SystemAdmin
    SystemAdmin
    119 Posts

    Re: regedit execution on windows server 2008 r2

    ‏2012-12-03T21:55:03Z  
    Take a look at the "Disable Encryption for Clients" task (http://bigfix.me/cdb/fixlet/140). It contains an example of how you can import a registry file into the registry.

    You might also consider using native actionscript to set your registry values:

    http://bigfix.me/cdb/fixlet/228 see action 2 or 3

    http://bigfix.me/cdb/fixlet/74 see action 1 look for the "regset" command

    I see in your exmple you're trying to set dword's... try looking at this too: http://bigfix.me/cdb/fixlet/107 or http://bigfix.me/cdb/fixlet/89