Hi. We are looking for a way to query the contents of a registry (regedit) in a remote windows machine. Currently the command "querymultiplevalues" works if I set the complete key path like this 'querymultiplevalues "Software\Microsoft\Windows\CurrentVersion\Uninstall\Winrar archiver" DisplayName' but for our application to work, we need a way to query the path: Software\Microsoft\Windows\CurrentVersion\Uninstall and get the children of this path. Does the rpccclient support this? Saludos Cordiales. Victor Lucero Arquitecto de Software +56989229712 <89229712> victor.lucero at vzor.cl www.vzor.cl <http://vzor.cl/firma-electronica-horizontal/victor.lucero.html#>
On Mon, Aug 08, 2016 at 10:50:14AM -0300, Victor Lucero wrote:> Hi. > > We are looking for a way to query the contents of a registry (regedit) in a > remote windows machine. > > Currently the command "querymultiplevalues" works if I set the complete key > path > > like this > > 'querymultiplevalues > "Software\Microsoft\Windows\CurrentVersion\Uninstall\Winrar > archiver" DisplayName' > > but for our application to work, we need a way to query the path: > > Software\Microsoft\Windows\CurrentVersion\Uninstall and get the children of > this path. > > Does the rpccclient support this?Not at present. That would be a useful addition to rpcclient if you'd like to add it though !
Right now diving into the code, also reading "Samba developers Guide", is there a good place to start lookig/reading? the proyect looks pretty big to analyze on my own Saludos Cordiales. Victor Lucero Arquitecto de Software +56989229712 <89229712> victor.lucero at vzor.cl www.vzor.cl <http://vzor.cl/firma-electronica-horizontal/victor.lucero.html#> 2016-08-09 15:00 GMT-04:00 Jeremy Allison <jra at samba.org>:> On Mon, Aug 08, 2016 at 10:50:14AM -0300, Victor Lucero wrote: > > Hi. > > > > We are looking for a way to query the contents of a registry (regedit) > in a > > remote windows machine. > > > > Currently the command "querymultiplevalues" works if I set the complete > key > > path > > > > like this > > > > 'querymultiplevalues > > "Software\Microsoft\Windows\CurrentVersion\Uninstall\Winrar > > archiver" DisplayName' > > > > but for our application to work, we need a way to query the path: > > > > Software\Microsoft\Windows\CurrentVersion\Uninstall and get the > children of > > this path. > > > > Does the rpccclient support this? > > Not at present. That would be a useful addition to rpcclient if > you'd like to add it though ! >