3 Replies Latest reply on Feb 3, 2014 6:05 PM by dgaines

    Windows 7 Recovery Mode state

    dgaines Apprentice

      I am looking for suggestions on ways to detect whether or not the Windows 7 Recovery mode is enabled or not.  I know that that the value is visable when running bcdedit from a command line.



      Windows Boot Manager


      identifier              {bootmgr}

      device                  partition=\Device\HarddiskVolume1

      description             Windows Boot Manager

      locale                  en-US

      inherit                 {globalsettings}

      default                 {current}

      resumeobject            {7de57afb-4d33-11e1-91e0-cc0b1e2eb48f}

      displayorder            {current}

      toolsdisplayorder       {memdiag}

      timeout                 30



      Windows Boot Loader


      identifier              {current}

      device                  partition=C:

      path                    \Windows\system32\winload.exe

      description             Windows 7

      locale                  en-US

      inherit                 {bootloadersettings}

      recoverysequence        {7de57afd-4d33-11e1-91e0-cc0b1e2eb48f}

      recoveryenabled         No

      osdevice                partition=C:

      systemroot              \Windows

      resumeobject            {7de57afb-4d33-11e1-91e0-cc0b1e2eb48f}

      nx                      OptIn


      The recoveryenable is set to no on this machine.   I have also found that it is available at HKEY_LOCAL_MACHINE\BCD00000000\Objects\{f436d655-3fc7-11e2-bca2-b51d8dbf124e}\Elements\16000009, with the value Element in the registry.   An enabled machine would have the value of  hex:01 in the 16000009.   This key can vary depending on the model of the device, but it is always the 16000009 value.  I tried putting it into the Manage Software List, Registry keys but so far it appears that maybe that landesk may not be able to read that key for whatever reason.    I just wanted to see if anyone had tried to detect this value and see what they had done.  Thank you in advance.