I’ve been trying several things to roll out this registry key change from Intune. I’m now trying to use the remediation process to do so.

I used this tool to create the scripts: https://reg2ps.azurewebsites.net/

The following are my scripts and settings:

Detection Script:

try {
    if(-NOT (Test-Path -LiteralPath "HKLM:SOFTWAREPDF24")){ return $false };
    if(-NOT (Test-Path -LiteralPath "HKLM:SOFTWAREPDF24Services")){ return $false };
    if(-NOT (Test-Path -LiteralPath "HKLM:SOFTWAREPDF24ServicesFax")){ return $false };
    if(-NOT (Test-Path -LiteralPath "HKLM:SOFTWAREPDF24ServicesPDF")){ return $false };
    if((Get-ItemPropertyValue -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'LogoClickUrl' -ea SilentlyContinue) -eq 'https://creator.pdf24.org/logoClick.php') {  } else { return $false };
    if((Get-ItemPropertyValue -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'Label' -ea SilentlyContinue) -eq 'pdf24') {  } else { return $false };
    if((Get-ItemPropertyValue -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'CreatorID' -ea SilentlyContinue) -eq 'pdf24') {  } else { return $false };
    if((Get-ItemPropertyValue -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'CreatorName' -ea SilentlyContinue) -eq 'pdf24.org') {  } else { return $false };
    if((Get-ItemPropertyValue -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'CreatorEmail' -ea SilentlyContinue) -eq '[email protected]') {  } else { return $false };
    if((Get-ItemPropertyValue -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'Installer' -ea SilentlyContinue) -eq 'innoSetup') {  } else { return $false };
    if((Get-ItemPropertyValue -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'InstallationID' -ea SilentlyContinue) -eq 'D0DF8C8C-74FD-4B73-9411-B9C45C7A8481') {  } else { return $false };
    if((Get-ItemPropertyValue -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'InstallDir' -ea SilentlyContinue) -eq 'C:Program FilesPDF24') {  } else { return $false };
    if((Get-ItemPropertyValue -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'UpdateMode' -ea SilentlyContinue) -eq 2) {  } else { return $false };
    if((Get-ItemPropertyValue -LiteralPath 'HKLM:SOFTWAREPDF24ServicesFax' -Name 'Port' -ea SilentlyContinue) -eq '\.pipeFaxPrint') {  } else { return $false };
    if((Get-ItemPropertyValue -LiteralPath 'HKLM:SOFTWAREPDF24ServicesFax' -Name 'Handler' -ea SilentlyContinue) -eq 'shellCmd') {  } else { return $false };
    if((Get-ItemPropertyValue -LiteralPath 'HKLM:SOFTWAREPDF24ServicesFax' -Name 'ShellCmd' -ea SilentlyContinue) -eq '"%binDir%pdf24-Fax.exe"') {  } else { return $false };
    if((Get-ItemPropertyValue -LiteralPath 'HKLM:SOFTWAREPDF24ServicesFax' -Name 'RequestUrl' -ea SilentlyContinue) -eq 'https://faxout.pdf24.org') {  } else { return $false };
    if((Get-ItemPropertyValue -LiteralPath 'HKLM:SOFTWAREPDF24ServicesPDF' -Name 'Port' -ea SilentlyContinue) -eq '\.pipePDFPrint') {  } else { return $false };
    if((Get-ItemPropertyValue -LiteralPath 'HKLM:SOFTWAREPDF24ServicesPDF' -Name 'Handler' -ea SilentlyContinue) -eq 'default') {  } else { return $false };
}
catch { return $false }
return $true

Remediation Script:

if((Test-Path -LiteralPath "HKLM:SOFTWAREPDF24") -ne $true) {  New-Item "HKLM:SOFTWAREPDF24" -force -ea SilentlyContinue };
if((Test-Path -LiteralPath "HKLM:SOFTWAREPDF24Services") -ne $true) {  New-Item "HKLM:SOFTWAREPDF24Services" -force -ea SilentlyContinue };
if((Test-Path -LiteralPath "HKLM:SOFTWAREPDF24ServicesFax") -ne $true) {  New-Item "HKLM:SOFTWAREPDF24ServicesFax" -force -ea SilentlyContinue };
if((Test-Path -LiteralPath "HKLM:SOFTWAREPDF24ServicesPDF") -ne $true) {  New-Item "HKLM:SOFTWAREPDF24ServicesPDF" -force -ea SilentlyContinue };
New-ItemProperty -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'LogoClickUrl' -Value 'https://creator.pdf24.org/logoClick.php' -PropertyType String -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'Label' -Value 'pdf24' -PropertyType String -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'CreatorID' -Value 'pdf24' -PropertyType String -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'CreatorName' -Value 'pdf24.org' -PropertyType String -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'CreatorEmail' -Value '[email protected]' -PropertyType String -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'Installer' -Value 'innoSetup' -PropertyType String -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'InstallationID' -Value 'D0DF8C8C-74FD-4B73-9411-B9C45C7A8481' -PropertyType String -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'InstallDir' -Value 'C:Program FilesPDF24' -PropertyType String -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:SOFTWAREPDF24' -Name 'UpdateMode' -Value 2 -PropertyType DWord -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:SOFTWAREPDF24ServicesFax' -Name 'Port' -Value '\.pipeFaxPrint' -PropertyType String -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:SOFTWAREPDF24ServicesFax' -Name 'Handler' -Value 'shellCmd' -PropertyType String -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:SOFTWAREPDF24ServicesFax' -Name 'ShellCmd' -Value '"%binDir%pdf24-Fax.exe"' -PropertyType String -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:SOFTWAREPDF24ServicesFax' -Name 'RequestUrl' -Value 'https://faxout.pdf24.org' -PropertyType String -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:SOFTWAREPDF24ServicesPDF' -Name 'Port' -Value '\.pipePDFPrint' -PropertyType String -Force -ea SilentlyContinue;
New-ItemProperty -LiteralPath 'HKLM:SOFTWAREPDF24ServicesPDF' -Name 'Handler' -Value 'default' -PropertyType String -Force -ea SilentlyContinue;

Settings

I now tried to run the remediation on the device but it doesn’t change the registry key value from 1 to 2. Nothing happens.