export and delete a registry KEY using sccm configuration items and baselines

Question

Hi,

I know how I can add a registry key using SCCM Configuration Items and Configuration Baselines. But how can I export registry key and than delete it with Configuration Items and Configuration Baselines?

Any Idea?

Regards

Answer 1

Hi, @PerserPolis-1732

Here is an example to deleyte the regkey, I have tested in my lab and it works well.

The discovery script:

$RegKey = Test-Path 'HKLM:\SOFTWARE\Microsoft\Internet Explorer\aaa'    
if ($RegKey –eq "true")  
{Write-Host 'Compliant'}  
else  
{Write-Host 'Non-Compliant'}  

The remediation script:

Remove-Item -Path 'HKLM:\SOFTWARE\Microsoft\Internet Explorer\aaa'  

Remember to set the rule as below:

And also check the "remediation" during configuration baseline deployment:

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Export it where? And why?

Using a PowerShell-based CI, you can do pretty much anything.

Answer 3

because of zero day issue of Microsoft I have to export it and delete it.

PowerShell how? with CI?

Answer 4

Hi, @PerserPolis-1732

Thank you for posting in Microsoft Q&A forum.

Here is an example how to use powershell script to discovery and remediation, you may need to customize the script according your own requirements:
https://timmyit.com/2016/09/05/guide-configuration-item-with-powershell-discovery-and-remediation-string-compliance/
(Please Note: Since the website is not hosted by Microsoft, just for your reference.)

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 5

any powershell script for export and delete Registry key