Registry

Windows Registry

The Windows Registry contains all the configuration information for the operating system, devices and applications that are installed on the operating system and users.

To access the registry use regedit.

Import Keys into Registry

import with a .reg file which is a text file with the registry keys. Importing keys will overwrite any existing keys if imported to the same location. Take a backup of the registry first.

the text file will look like this:

---

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v2.0.50727]
"SystemDefaultTlsVersions"=dword:00000001
"SchUseStrongCrypto"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319]
"SystemDefaultTlsVersions"=dword:00000001
"SchUseStrongCrypto"=dword:00000001

Get Info from reg keys

Get specific info from registry keys using get-childitem and get-itemproperty.

Example, get uninstall string for citrix applications:

Get-ChildItem -Path HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall -Recurse -ErrorAction SilentlyContinue | Get-ItemProperty | Where-Object { $_.DisplayName -like "*citrix*" } | Select-Object Uninstallstring

---