Restart information - Windows
Log In or Register to download the BES file, and more.

0 Votes

Description

This analysis shows what could cause a "Pending Restart" status on Windows endpoints

Property Details

ID2998686
StatusBeta - Preliminary testing ready for more
TitleRestart information - Windows
DomainBESC
Keywordsrestart, pending, windows
Added by on 5/25/2023 4:10:21 AM
Last Modified by on 5/25/2023 4:10:21 AM
Counters 35 Views / 0 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Properties

Restart needed
Period Every Report
 
Used in 4 fixlets and 7 analyses   * Results in a true/false
Show indented relevance
pending restart
BigFix key
Period Every Report
 
  * Results in a true/false
Show indented relevance
if exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\BigFix\EnterpriseClient\BESPendingRestart\BESPendingRestart" of native registry then names of values of key "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\BigFix\EnterpriseClient\BESPendingRestart\BESPendingRestart" of native registry else "No key found"
PendingFileRenameOperations
Period Every Report
 
  * Results in a true/false
Show indented relevance
if exists value whose (name of it is "PendingFileRenameOperations") of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" of native registry then substrings separated by "%00" of (value whose (name of it is "PendingFileRenameOperations") of key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" of native registry as string) else "No value found"
RebootRequired
Period Every Report
 
  * Results in a true/false
Show indented relevance
if exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired" of native registry then (name of it & "|" & it as string) of values of key "Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired" of native registry else "No key found"
RebootPending
Period Every Report
 
  * Results in a true/false
Show indented relevance
if exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending" of native registry then (name of it & "|" & it as string) of values of key "Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending" of native registry else "No key found"
UpdateExeVolatile
Period Every Report
 
  * Results in a true/false
Show indented relevance
if exists key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates" of native registry then if exists value whose (name of it is "UpdateExeVolatile") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates" of native registry then value whose (name of it is "UpdateExeVolatile") of key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates" of native registry as string else "No value found" else "Key does not exist"
Exclusions
Period Every Report
 
  * Results in a true/false
Show indented relevance
values of settings "_BESClient_ActionManager_PendingRestartExclusions" of client

Relevance

isWindows (Relevance 1172)
Used in 1157 fixlets and 540 analyses   * Results in a true/false
Show indented relevance
windows of operating system
Used in 3 analyses   * Results in a true/false
Show indented relevance
in agent context

Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!