HKLM Registry Query (Integer) service
This service uses the Registry Query (Integer) AMP to query a specific key in registry. This service queries the registry key under the registry path specified in service parameters and convert the result to an integer which can be monitored. This service is supported only on HKEY_LOCAL_MACHINE, although other registry hives might work.
Example:
Registry Key: DbgJITDebugLaunchSetting
Registry Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework
Output: Integer value
For more information, refer to www.microsoft.com.
| Service Type | AMP |
| Powershell cmdlet | Get-ItemProperty -Path |
| Supported Systems/Application | Windows Workstation Windows Server |
| Known limitations | Windows only |
| Max instances per device | 100 |
| Supported devices class | Workstation - Windows Laptop - Windows |
| Notification profile | N/A |
| Monitored by | Local agent |
Troubleshooting
| Issue | Recommendation |
|---|---|
| Misconfigured | Check if Powershell 5.1 is installed and the registry key is available. |
| CBS Reboot Pending Failed status | CBS returns true if a new windows component has been added or removed. This key is useful to check if windows has been altered. |
| Windows Update Reboot Required Failed status | This status is failed when a Windows update was installed or moved and requires a reboot. |
| File Rename Pending (Reboot) Failed status | The Pending File rename operation is modified when a new application is installed or updated. This key might or might not indicate that a reboot is required, however it indicates changes on the file system due to application or Windows changes. |