Scanning registry values with custom registry scanning

Lansweeper allows you to scan values in your Windows computers' registries, through custom registry scanning. Registry scanning checks what a specific registry value is set to across your Windows computers. As a lot of data and settings are stored in a computer's registry, there are an endless number of things you can report on. If you submit the Version value seen below (Flash plugin version) for registry scanning for instance, Lansweeper will scan the data stored in this value, e.g. 11.5.502.135.

Flash plugin version in registry

 

To retrieve the data stored in a specific registry value, do the following:

  1. Browse to the following section of the web console: Scanning\Scanned Item Interval
    Scanned Item Interval menu
  2. Make sure that the Enable checkbox is ticked for the REGISTRY item, indicating that registry scanning is enabled.
    enabling registry scanning
  3. Browse to the following section of the web console: Scanning\File & Registry Scanning
    File & Registry Scanning menu
  4. Hit the Add Registry Scan button in the Registry Scanning section of the page. You will be presented with a popup window. Select the registry value's root key from the Rootkey dropdown, enter the remainder of the registry path into the Regpath field, enter the name of the registry value into the Regvalue field and hit Ok.
    submitting registry key for scanning
    - To avoid typos, it is best to copy the Regpath directly from regedit.exe on a Windows computer. You can right-click the key in regedit.exe and select Copy Key Name in the dropdown.
    - No parameters are currently available for registry scanning. You must submit an exact registry value. For performance reasons, registry scanning only queries specific registry values. Retrieving all values within a key or searching the entire registry for a specific value is not possible.
    - To scan a (Default) value, leave the Regvalue field blank when submitting your registry scan. Keep in mind that only (Default) value names that have a value can be scanned. (Default) value names whose value is not set will not be detected.
  5. If you plan on scanning your Windows computers with our LsPush scanning agent and without a direct connection to your Lansweeper server, hit the Export Registry.tsv for LsPush button to export your registry scanning configuration. You can then place the Registry.tsv file in the same folder as your LsPush executable to have LsPush retrieve the registry data as well.
    scanning registry keys with LsPush
    Exporting registry scanning settings is only necessary if you are scanning with our LsPush agent and if your LsPush command does not reference your Lansweeper server, i.e. if LsPush is not connecting directly to your Lansweeper server. If LsPush *is* connecting to your server, it will automatically retrieve your settings and an export is not required. More info on how to scan Windows computers with LsPush can be found in this knowledge base article.
  6. Rescan your Windows computers with LsPush or by clicking the Assets link at the top of the web console, ticking the checkboxes in front of the computers and hitting the Rescan button on the left.
    opening the Assets menu
    rescanning Windows computers
    - You can perform a search on one or more columns to easily find specific assets. In the example above, we filtered the Domain column to only list assets within the lansweeper domain.
    - You could also tick the checkbox at the very top to select all assets in the current search results.
  7. View scan results under Scanning\File & Registry Scanning by hitting the Report button. Alternatively, you can run a custom report or view an individual computer's scan results in the Config\Scanned Info\Registry Keys section of the computer's Lansweeper webpage.
    viewing registry scanning results in a report
    viewing registry scanning results on a computer webpage
    - If a registry key is displayed on a computer's webpage, that means the key was found on the computer and you can view the key's value.
    - If a registry key is not displayed on a computer's webpage, that means the key was not found on the computer.

Related Articles