11 Replies Latest reply on Jan 29, 2018 1:53 PM by Eric.Cuthill

    I would like to know if our servers have a registry key

    mills63 Rookie

      Hi All

       

      I am looking at installing the Intel Meltdown patches eg. Q4056898

       

      I have created a template and deployment group that installs the Reg Key

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat /v cadca5fe-87d3-4b96-b7fb-a231484277cc /t "REG_DWORD" /d 0 /f

       

      I then was able to deploy the patches Q4056898

       

      I then need to activate the patch by adding the enable reg entries

       

      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 0 /f

      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 3 /f

      HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Virtualization" /v MinVmVersionForCpuBasedMitigations /t REG_SZ /d "1.0" /f

       

      all good did the same as above created a template and deployment group.

       

      The issue is I have no way of knowing if the reg entry has actually been applied.

      Is there any way Shavlik can interrogate the registry and tell me if the new reg key exists 

       

      Thanks

      Steve