The script referenced in the TrendMicro Pattern Version thread was written in vbscript, which can only be run locally on the Orion server itself. In order to collect information about registry values on remote Windows hosts the script would need to be written in PowerShell, which includes a remoting and impersonation mechanism (WinRM). You may want to post this to the Script Lab where most of the script gurus hang out as they are wise beyond their years in the ways of PowerShell scripting.
↧