... You will notice this problem because you have been figuring out how to export coffee EE rules all afternoon ..
There are two types, but I only implement one:
: Export the coffee EE rule. The file name is the current date. Reg.
@ Echo export coffee EE rule ing ....
Regedit/e d:/backup/coffee/8.5/% date %. Reg "HKEY_LOCAL_MACHINE/software/McAfee/vscore/on access logging/behaviourblocking /"
The size and content of this method are the same as those exported manually:
Reg export "HKLM/software/McAfee/vscore/on Access Protocol/behaviourblocking" AA. Reg
The size is smaller... I still don't know why .....
PS:
Go to: http://www.pcworld.com.cn/2001/back_issues/2116/1633g.asp
The main functions of reg.exe include query, add, delete, copy, save, restore, load, unload, import, export, comparison and remote operations on registry items.
Reg add [// machine/] keyname [/V valuename |/ve] [/T type] [/s separator] [/D data] [/F]
---- Machine is used to specify the remote computer name. If the local computer is operated, this parameter is omitted. If you want to remotely operate a computer named server, its machine parameter is expressed as "// server ".
---- Keyname is used to specify the key under which the registry creates a registry value. This parameter must be expressed in the full path of the registry key, however, the four root keys in the Registry are generally abbreviated (the abbreviations of each root key are shown in Table 1 ). For example, the registry key you want to operate on is "HKEY_LOCAL_MACHINE/software/Microsoft/Windows NT/CurrentVersion/Winlogon ", the keyname parameter is "HKLM/software/Microsoft/Windows NT/CurrentVersion/Winlogon ". Note: If you are operating on the remote computer registry, you can only use the HKLM and hkcu root keys.
----/V valuename |/VE is used to specify the name of the registry value to be added. The parameter/ve indicates the registry value whose key value is "default" under the specified registry key.
----/T type is used to specify the Data Type of the created registry value. If not specified, the REG_SZ data type is used by default (common data types are shown in table 2 ).
----/S separator is used to specify characters to separate strings when the data type is reg_multi_sz.
----/D data is used to specify the data of the created registry value.
----/F is used to specify whether to overwrite the registry value if it exists.
Application Instance
---- Example 1: create a registry value with the Data Type "savepath" REG_SZ under "HKEY_CURRENT_USER/software/mydata" of the remote computer named "server, enter the following in the doscommand line:
---- Reg add // server/hkcu/software/mydata/V savepath/D "C:/mydata"
---- Example 2: create a registry value named "isnew" under "HKEY_CURRENT_USER/software/mydata" on the Local Computer and overwrite the registry value if this registry value exists, enter Reg add hkcu/software/mydata/V isnew/T REG_DWORD/D 1/F in the doscommand line.
---- For more registry operation methods, you can enter "Reg /? "To learn more about parameter settings.
---- (Author address: Hangzhou daali 6-2-103,310003)
---- Responsible editor: Yu Xiang yu_xiang@ccw.com.cn