This is using SCCM 2012 SP1.
Registry key, value and property remediation. The case is forcing tvsu.exe to run as admin, which prompts users for permissions that they dont have. Its a way to stop the end user from installing software through Think Vantage tool. The need is that these
exist in the HKLM.
Key Path: HKLM\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
Value name: C:\Program Files\Lenovo\System Update\tvsu.exe
Data Type : REG_SZ
Value Data: RUNASADMIN
There are 2 parts to this, first the key Layers doesnt exist (Problem 1), then the Name and Properties don't exist under Layers (Problem 2)
To resolve this I am using 2 Configuration Items:
First checks if "Layers" exists, if it doesnt it should remediate by creating it, which it isnt.
Second checks if the Value and Data are correct, which dont exist and again is not creating it.
The settings for compliance on both are "Registry key must exist on client devices" but under the Compliance Rules it is showing "Remediate:No", and I cannot find a place to change that. I know the evaluations work since I can create
the items manually and compliance will show compliant for both, and if they dont exist it tells me non-compliant. Under the Baseline deployment I do have the 2 check boxes checked for remediation as well.
What am I missing? Is this only able to report compliance status and not able to actually remediate when using the methods for registry?
EDIT: I realize I shouldnt need both CI's but I created the one for the Key path to validate if that was the cause of the non-remediation.