PowerSTIG

3.3.0

DSCResources/Resources/windows.Registry.ps1

# Copyright (c) Microsoft Corporation. All rights reserved.
# Licensed under the MIT License.

$rules = $stig.RuleList | Select-Rule -Type RegistryRule

foreach ($rule in $rules)
{
    if ($rule.Key -match "^HKEY_LOCAL_MACHINE")
    {
        if ($rule.ValueType -eq 'MultiString' -and $null -ne $rule.ValueData)
        {
            $valueData = $rule.ValueData.Split("{;}")
        }
        elseif ($null -eq $rule.ValueData)
        {
            # The registry resource's SET will require an empty string array instead of $null
            $valueData = @('')
        }
        else
        {
            $valueData = $rule.ValueData
        }

        if ($valueData -eq 'ShouldBeAbsent')
        {
            $rule.Ensure = 'Absent'
        }

        # Changing our key to adhere to the resource requirements. Issue discussed at this link https://github.com/PowerShell/xPSDesiredStateConfiguration/issues/444
        if ($rule.Ensure -eq 'Absent')
        {
            $rule.Key = $rule.Key -replace 'HKEY_LOCAL_MACHINE', 'HKLM:'
            Registry (Get-ResourceTitle -Rule $rule)
            {
                Key       = $rule.Key
                ValueName = $rule.ValueName
                Ensure    = $rule.Ensure
                Force     = $true
            }
        }
        else
        {
            Registry (Get-ResourceTitle -Rule $rule)
            {
                Key       = $rule.Key
                ValueName = $rule.ValueName
                ValueData = $valueData
                ValueType = $rule.ValueType
                Ensure    = $rule.Ensure
                Force     = $true
            }
        }
    }
}