WMI遞歸遠程注冊表讀取

Question

我試圖在域上列出一個遠程注冊表文件夾。 我能夠列出鍵但不能遞歸使用WMI或OpenRemoteBaseKey。 我想在x32和x64的注冊表文件夾和子文件夾上獲取Keyname，Values，Type，最好使用WMI，因為我需要客戶端上的其他信息。

這是我的代碼，但需要改進：

            foreach (string strComputer in arrComputers)
            {
                Console.WriteLine("==========================================");
                Console.WriteLine("  Computer: " + strComputer);
                Console.WriteLine("==========================================");

                ManagementClass classInstance = 
                    new ManagementClass("\\\\" + strComputer + "\\root\\DEFAULT", 
                    "StdRegProv", null);

                ManagementBaseObject inParams = 
                    classInstance.GetMethodParameters("EnumValues");

                inParams["sSubKeyName"] =  "SOFTWARE\\IPS";

                ManagementBaseObject outParams = 
                    classInstance.InvokeMethod("EnumValues", inParams, null);

                Console.WriteLine("Out parameters:");
                Console.WriteLine("ReturnValue: " + outParams["ReturnValue"]);
                Console.WriteLine("sNames: " + outParams["sNames"]);
                Console.WriteLine("Types: " + outParams["Types"]);
            }

提前致謝。

Answer 1

我沒有在你的代碼中看到任何遞歸。 這是一個例子。 在遞歸所有子子鍵之前，ParseKey將使用'ParseChildValues'轉儲值。

using Microsoft.Win32;
...

/// <summary>
/// This method returns a list of registry values from a given key in .reg format.
/// </summary>
/// <param name="key">Registry key from which to obtain values.</param>
/// <returns>A CR-separated list of all the registry values for a given key.</returns>
private static string ParseChildValues(RegistryKey key)
{
    if (key.IsNull())
        return string.Empty;
    StringBuilder sb = new StringBuilder();

    foreach(string val in key.GetValueNames())
    {
        sb.AppendFormat("{0}=\"{1}\"", string.IsNullOrEmpty(val) ? "@" : val, key.GetValue(val));
        sb.AppendLine();
    }

    return sb.ToString();
}

/// <summary>
/// Parses the SubKeys of a given RegistryKey.
/// </summary>
/// <param name="key">A registry key</param>
/// <returns>Lots of important data!</returns>
private static string ParseKey(RegistryKey key)
{
    if (key.IsNull())
        return string.Empty;
    StringBuilder sb = new StringBuilder();
    sb.AppendLine();
    sb.AppendFormat("[{0}]", key.Name);
    sb.AppendLine();
    sb.Append(ParseChildValues(key));
    foreach (var subKey in key.GetSubKeyNames())
    {
        sb.Append(ParseKey(key.OpenSubKey(subKey)));
    }
    return sb.ToString();
}

static void Main(string[] args)
{
    // Dump the contents of HKEY_CLASSES_ROOT\*
    Console.WriteLine("Getting the contents of HKCR\\* on the local machine");
    RegistryKey localHKCR = Registry.ClassesRoot.OpenSubKey("*", RegistryKeyPermissionCheck.ReadSubTree);
    Console.WriteLine(ParseKey(localHKCR));

    // Dump the contents of HKEY_CLASSES_ROOT\* on a remote machine.
    Console.WriteLine();
    Console.WriteLine("Getting the contents of HKCR\\* via OpenRemoteBaseKey");
    RegistryKey remoteHKCR = RegistryKey.OpenRemoteBaseKey(RegistryHive.ClassesRoot, "MACHINENAME");
    Console.WriteLine(ParseKey(remoteHKCR.OpenSubKey("*", RegistryKeyPermissionCheck.ReadSubTree)));
}