Pending Restart Detection - superseded
Log In or Register to download the BES file, and more.

0 Votes

Versioning - This is an older version.

1Pending Restart Detection6/16/2017 9:26:45 AM
2Pending Restart Detection6/16/2017 9:29:18 AM
3Pending Restart Detection6/20/2017 10:28:30 PM

Description

Use this Analysis to detect the registry keys that's causing a pending restart status. The following keys / values are examined:

  • HKLM\System\CurrentControlSet\Control\Session Manager  value: PendingFileRenameOperations
  • HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired
  • HKLM\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending
  • HKLM\Software\Microsoft\Updates  value: UpdateExeVolatile

Reference: https://forum.bigfix.com/t/9-5-2-problem-with-detecting-restart/17643/10

THIS CONTENT IS PROVIDED BY THE AUTHOR "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.


Property Details

ID2998572
StatusBeta - Preliminary testing ready for more
TitlePending Restart Detection
DomainBESC
KeywordsPending Restart
Added by on 6/16/2017 9:26:45 AM
Last Modified by on 6/16/2017 9:26:45 AM
Counters 3660 Views / 0 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Properties

PendingFileRenameOperations
Period Every Report
 
  * Results in a true/false
Show indented relevance
if(exists value "PendingFileRenameOperations" of keys "HKLM\System\CurrentControlSet\Control\Session Manager" of native registry) then ((it as string) of value "PendingFileRenameOperations" of key "HKLM\System\CurrentControlSet\Control\Session Manager" of native registry) else ("N/A")
WindowsUpdate RebootRequired
Period 30 days
 
  * Results in a true/false
Show indented relevance
if (exists key "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired" of native registry) then (names of values of key "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired" of native registry) else ("N/A")
CBS RebootPending
Period Every Report
 
  * Results in a true/false
Show indented relevance
if (exists key "HKLM\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending" of native registry) then ("RebootPending") else ("N/A")
UpdateExeVolatile
Period Every Report
 
  * Results in a true/false
Show indented relevance
if (exists value "UpdateExeVolatile" of keys "HKLM\Software\Microsoft\Updates" of native registry) then ("UpdateExeVolatile") else ("N/A")

Relevance

Used in 4 fixlets and 7 analyses   * Results in a true/false
Show indented relevance
pending restart
Used in 3 analyses   * Results in a true/false
Show indented relevance
(name of it starts with "Win") of operating system

Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!