CIR’s run as system so to make calls that read the users data is difficult.

Easy Solution: Have a kscript that runs as logged on user, on a custom schedule to catch the users info and write it to a txt file.

You can also add the other couple of user calls needed for the malware/adware portion of my Dell world presentation to this same batch file then you will only need one Kscript running as user to gather the needed data.  I will be posting that blog in a couple of days so watch for that.

The gatherer kscript:  the cron settings run 10am, noon, 2pm, and 4pm monday thru friday
CreateObject("Wscript.Shell").Run "run.bat",0,True
rem: this part is for malware detection:

reg.exe query hkcu\software\microsoft\windows\currentversion\run /s > C:\ProgramData\Dell\KACE\user\hkcuRunKeys.txt

reg.exe query hkcu\software\microsoft\windows\currentversion\uninstall /s /f DisplayName > C:\ProgramData\Dell\KACE\user\hkcuSoftware.txt

rem: this part lists the users network - drives and printers

wmic logicaldisk where "drivetype='4'" get deviceid,providername > C:\ProgramData\Dell\KACE\user\NetworkDrives.txt

wmic printer where 'network="true"' get name, default, network > C:\ProgramData\Dell\KACE\user\NetworkPrinters.txt

once that has run it will build the needed txt files to read into the cirs below


This what you get returned under the CIR section of an individual computer, of course now you can also create reports on them